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SECTION 1 
SUMMARY 

This document presents the version of expert knowledge for the 

onboard navigation (ONAV) entry system. Included herein is some brief 
background information together with information describing the knowledge 
that the system contain. 

tVc<?S 
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SECTION 2 
INTRODUCTION 


2.1 BACKGROUND 

Developing detailed requirements for an expert system involves a series of 
meetings with various combinations of development team and expert person- 
nel. During these meetings, available information is reviewed and opera- 
tions and functional processes of the proposed system are discussed. 

Different issues are addressed in each meeting where relevant techniques 
and details are refined and documented. Broad areas are covered by early 
meetings with specific details being identified quickly. Information 
typically is captured in the form of rules, heuristics, or concepts along 
with associated background and functional specifications. As this 
information is refined and expanded, more detailed rules are formulated. 


2.2 SCOPE OF THIS DOCUMENT 

The .target audience for this document is the knowledge domain expert. It 
u t t l' W a reflection of "what the system knows" in a form as close as pos- 
sible to the expert's language. 

Required changes to this document are expected in the future. In partic- 
ular efforts to integrate this document into console operator training 
activities will subject the contents to the utmost scrutiny, jjdates^ will, 
be made as needed and in a timely manner. ** 


fix ^OCOfr'Q/OT £ 


iitauu^i « j _ / 

e+ eAf<*>n~o Ob^^eS. 
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SECTION 3 

SYSTEM INFORMATION BftSELINE 

The following subsections detail the various subsystem rule baselines for 
the ONAV entry expert system. Each subsection is divided into five parts. 

a. General Information 

General information provides for background types of information or 
assumptions made in other parts. If no information is available or 
required to clarify general concepts and approaches, only the word 
-none- need be given. The intent is to provide any information that 
helps develop and clarify rules, concepts, or heuristics. 

b. Inputs 

Inputs should give descriptions of those data items or other informa- 
tion used to perform the processing conducted in part c. If possible, 
the information sources should be specified as well. 

c. Rules/heuristics/concepts 

Rules/heuristics/concepts give the specifications for the processing 
which must occur (or, in the case of rules, for the pieces of expertise 
which must be gathered). The content may be rules, but it also may 
consist of tables, figures, flowcharts, etc. as appropriate for speci- 
fying what is to be done. 

d. Outputs 

Outputs should indicate what information is generated and available as 
a result of the processing performed. Any available destination infor- 
mation also should be included. 

e. Support Computations 

Support computations make convenient the specification of repetitive 
computations/manipulations needed as part of the processing activity, 
but which are not integral elements of the rules, heuristics, and 
concepts information. 


3-1 
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3.1 INITIAL CONDITIONS 

a. General Information 

The selected atmosphere model must be checked as part of the expert 
system's initial processing. Information about the atmosphere model 
comes both from the ONAV operator (as an input) and from the telemetry 
downlist giving the onboard atmosphere selected by the crew. 

The primary avionics software system (PASS) and backup flight system 
(BFS) should be in Major Mode 304 after blackout. Ignore the major 
modes of systems that are not operating. 

b. Inputs 


(1) Major mode PASS 

(2) Major mode BFS 

(3) BFS engage 

(4) Selected atmosphere 

(5) Desired atmosphere (ONAV input) 

(6) BFS N O GO (ONAV input) 

c. Rules/heuristics/concepts 

( 1 ) Engaged System 
IF J?—' 

- B FS (y engage^; A ^ OtJ 

- The BFS is the engaged system 
ELSE 

- The PASS is the engaged system. 


(J7) I'f 

(%) &J-S 


(2) System Availability ^(Part 7 } - 

- The BFS is engaged 
THEN 

- The BFS is the only system available. 

(3) System Availability u Part 2)' - c /^<~ / 

IF v ~- A 

- The BFS is not engaged 

- The BFS is NO GO 
THEN 

- The PASS is the only system available. 

(4) System Availability TPart 7} _ 

IF v ~ ^ 

- The BFS is not engaged 

- The BFS is GO 
THEN 

- Both systems are available. 


3.1-1 
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(5) Wrong Atmosphere Selected 

I f y ^J~ eK 

- (rhePASSiS) the engaged system 

- The ONAV 'operator-desired atmosphere is not the same as the 
flownl iste^ itmo sphere 

1EN ^ . 

- Notify operator that crew has incorrect atmosphere selected. 

- Recommend call to crew to select the desired atmosphere. 


Wrong Major Mode 
IF 

- For the available systems 

- The major mode is not 304 
THEN 

- Notify the operator that the (system) is in the wrong major mode. 

- Recommend call to crew to select Major Mode 304 in the (system). 


d. Outputs 


(1) PASS sequencing problem 

(2) BFS sequenc ing problem 

( 31,< Incorrec$ Atmosphere selected 

(4) System availability . 

(5) Engaged system_ — (£ 







e. 


Support Computations 
Cal^ul^fc < c desired item entry to select the atmosphere correctly^) • 


- Nominal (SPEC 51 item 37) 

- Cold (SPEC 51 item 38) 

- Hot (SPEC 51 item 39) 


3 . 1-2 


GOIDKF Y iO,M4> 100 SHf f TS 5 SQUARES 

t 0 > U AlO SHI. I TS 5 SQUARE S 
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'fU o^oy^p FP urtfiiMS- ,s re^nfM^ 
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XF 
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3.2 TELEMETRY STATUS 
a. General Information 

The telemetry (TLM) status tells the operator how much data is being 
downlisted. This is important since some variables are not available in 
low data rate. 


b. Inputs 


(1) Data available 

(2) High data rate 

(3) Low data rate 



c 


Rules /heuristics /concepts 


Telemetry-Status* Change 
IF 




- The current status is not the same as the previous status 


THEN 


- Notify the operator of a telemetry status change. 


d. Outputs 


I 

.j 


(1) TLM status (high, low, or none) 

(2) Status change message 


e. Support Computations 


None. 




3 . 2-1 
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a. General Information 


It is important for the ground (GND) and onboard runways to match 
because delta state updates are computed in runway coordinates. 

b. Inputs 


(1) I-load runway names and slots 

(2) Desired runway (name or slot number) (ONAV input) 

(3) PASS runway (slot number) 

(4) BFS runway (slot number) 

(5) GND runway (name) 

(6) System availability 


c. Rules/heuristics/concepts 


( 1 ) (C hect^ GND Runway nrr/v^ct 




- The GND runway (name) is not the same as the desired runway (name) 
THEN 

- Notify operator that the selected GND runway is in error. 

- Recommend call to Guidance Officer (GDO) to have trajectory change 
the GND runway . 



(2) (Check) On board Runway 
IF ' 

- For the available systems 

- The system runway (slot) is not the same as the desired runway 
(slot) 

THEN 

“ Notify operator that the system has selected the wrong runway. 

- Recommend call to crew to select proper runway. 


d. Outputs 


(1) Runway selection error 

(2) Item entry for area selection , . ^ 

(3) Item entry for primary/secondary runway S ^ y • 5 




fa 


e. Support Computations 

Calculate desired item entries to select the runways correctly. 
For actual and desired runways in the same area, 

Desired = primary - SPEC 50 item 3^ *>ft r ' r 


Desired = secondary - SPEC 50 item 4 


- ! 


t t n 


/ \ 
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For actual and desired runways in different 

Desired = primary - SPEC 50 item 41 ♦ 
Desired = secondary - SPEC 50 item 41 + 

where area = (desired slot ♦ 1)/2 truncated 


areas, 

area 

area item 4 
to an integer. 


3.3-2 
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3.4 INERTIAL MEASUREMENT UNITS (IMU’s) 

This section is divided into three major parts: availability, error growth, 

and recommended actions. 


3.4.1 Availability 

The purpose of this section is to determine which IMU's are available for 
use by navigation (NAV) or why an IMU is not available, and to note any 
changes in availability. Note that the check for good IMU's is to determine 

(1) how many IMU's can be used in the error detection and isolation sec- 
tions, (2) if the IMU is independent of redundancy management (RM), and 
(3) if it is not a check of which IMU's are available. 


3. 4. 1.1 PASS Availability 

a. General Information 
None. 


b. Inputs 

(1) IMU selection filter command 

(2) Commfault flags 

(3) String commfault flags 

(4) RM failure flags 

(5) Select/deselect flags 

(6) BFS engage 


c. Rules/heuristics/concepts 


( 1 ) 


( 2 ) 


IMU Commfault PASS 

IF PA 5 i 

- The, IfFS is (fo^engaged 

- An IMU was not commfaulted in the PASS previously 

- The commfault flag for that IMU is on in the PASS 
THEN 


- Notify operator that an IMU 

is commfaulted). 

- C c'v .' 1 A £. +i- .■ U" U • - L 

- | v ,r* v x /V i\ 

IMU Commfault Clear 


P i\a rp f i> » o 7 

PASS (Part 


is commfaulted (unless the whole string 

r/v * fc c < C C ^ w 'f ^ V )t 


b'V tr P 

\Y : 


l 


IF p_- 

- The^tfiEg. is <£o£ engaged 

- An IMU has been unavailable to the PASS due to commfault 

- The commfault flag for that IMU is off in the PASS 

- The fail flag or deselect flag for that IMU is on in the PASS 
THEN 


- Notify operator that the commfault has cleared (unless it was a 
string commfault). 

- Conclude that the IMU is unavailable to the PASS due to failure or 
deselect, whichever flag is on. 

- C r.t'fd v rp T|» . r Ti c Aj 


3.4-1 
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(3) 


(4) 


(5) 


( 6 ) 


(7) 


IMU Commfault Clear PASS (Part 2) 

IF 

- The A (2P§T 1 3 engaged 

- An IMU has been unavailable to the PASS due to commfault. 

- The commfault flag for that IMU is off in the PASS 

- The fail flag for that IMU is off in the PASS 

- The deselect flag for that IMU is off in the PASS 
THEN 

- Notify operator that the commfault has cleared (unless it was a 
string commfault). 

- Conclude that the IMU is now available to the PASS. 

- « ro Tmia. p.r* 


IMU Failed PASS 
IF P£% & 

- The^€TS is J) engaged 

- An IMU has been available to the PASS 

- The fail flag for that IMU is on in the PASS 
THEN 

- Notify operator of IMU failure. 

- Conclude that the IMU is unavailable to the PASS due to failure. 

- Riw pp e tPicr/c a! 

IMU Deselected PASS 

IF rA< 5 _£2-- 

- The A (^5° is <Jo)rengaged 

- An IMU has been available to the PASS 

- The deselect flag for that IMU is on in the PASS 
THEN 

- Notify operator of crew deselection. 

- Conclude that the IMU is unavailable to the PASS due to deselect. 

- C7?rv-/i.’d' 1 £ > no porrfij ti'c aJ 

IMU Reselected PASS 

IF 

" Th6 ' 

- An IMU has beej; unavailable to the PASS due to failure or deselect 

- The fail flag for that IMU is off in the PASS. 

- The deselect flag for that IMU is off in the PASS 
THEN 


I s (Jo^engaged 


- Notify operator of crew reselection. 

- Conclude that the IMU is now available to the PASS. 

- r ' c 2 mu. fP*>cf,cTtGr4 

Three Good IMU's 


if 

- The f (BFS is not engaged 

- All* three IMU's are not commfaulted in the PASS 

- All three IMU's are good 
THEN 

- Conclude that three good IMU's are in the PASS. 


(8) Two Good IMU's 

IF C^.s> 

- The^(BF$> is (not; engaged 

- IMU A is not commfaulted in the PASS 

- IMU A is good 

- IMU B is not commfaulted in the PASS 


3.4-2 
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- IMU B is good 

- IMU C is commfaulted in the PASS or suspect 
THEN 

- Conclude that we have two good IMU's in the PASS. 

(9) One Good IMU 

IF 2 a- 

- The i UHES is engaged 

- IMU A is not commfaulted in the PASS 

- IMU A is good 

- IMU B is commfaulted in the PASS or suspect 

- IMU C is commfaulted in the PASS or suspect 
THEN 

- Conclude that we have one good IMU in the PASS. 

(10) No Good IMU's 
IF 

- The,(BF$ is (fiofc engaged 

- All* three IMU’s are commfaulted in the PASS or suspect 

THEN ^ **** 

- Notify operator of A IMU^ sh orta g^in the PASS. 

- Conclude that we have no good IMU's in the PASS. 

d. Outputs 

( 1 ) IMU good status 

(2) IMU downmodes 

(3) IMU upmodes , 

1 4 pPetJiCTiOf* 

e. Support Calculations 
None. 


3. 4. 1.2 BFS Availability 

a. General Information 

When the BFS is engaged, the expert system cannot keep track of IMU 
deselections and reselections except in certain situations. 

b. Inputs 

(1) Commfault flags 

(2) String commfault flags 

(3) Hardware failure flags 

(4) BFS IMU , 

(5) BFS 

(6) BFS engaged 

(7) IMU deselect flag 


3.4-3 
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c. Rules/heuristics/concepts 

(1) IMU Commfault BFS 
IF 

- The BFS is available 

- An IMU was not* commfaulted_l n the BFS, previously^ 

- The commfault Tlag~~for that^IMU is on in the BFS 
THEN 

- Conclude that the IMU is not available to the BFS due to commfault. 

- Notify operator of IMU commfault (unless the whole string is 
commfaulted ) . 

(2) IMU Commfault Clear BFS (Not Engaged) 

IF 

- The BFS is available 

- The BFS is not engaged 

- An IMU was unavailable to the BFS due to commfault 

- The commfault flag for that IMU is off in the BFS 
THEN 

- Conclude that the IMU is available to the BFS (if the fail flag is 
off) or unavailable due to failure (if the fail flag is on). 

- Notify operator that commfault has been cleared (unless the whole 
string is commfaulted). 

(3) IMU Commfault Clear BFS (Engaged, Part 1) 

IF 

- The BFS is engaged 

- An IMU has been unavailable to the BFS due to commfault 

- The commfault flag for that IMU is off in the BFS 

- The fail flag or deselect flag for that IMU is on in the BFS 
THEN 

- Notify operator that the commfault has cleared (unless it was a 
string commfault). 

- Conclude that the IMU is unavailable to the BFS due to failure or 
deselect, whichever flag is on. 

(4) IMU Commfault Clear BFS (Engaged, Part 2) 

IF 

- The BFS is engaged 

- An IMU has been unavailable to the BFS due to commfault 

- The commfault flag for that IMU is off in the BFS 

- The fail flag for that IMU is off in the BFS 

- The deselect flag for that IMU is off in the BFS 
THEN 

- Notify operator that the commfault has cleared (unless it was a 
string commfault). 

- Conclude that the IMU is now available to the BFS. 

(5) IMU Failed BFS 
IF 

- The BFS is available 

- An IMU was available to the BFS 

- The fail flag for that IMU is on in the BFS 
THEN 


3.4-4 
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- Conclude that the IMU is unavailable to the BFS due to failure. 

- Notify operator of IMU failure in the BFS. 


(6) IMU Deselected BFS (Not Engaged, Part 1) 

IF -fbz P>F S i *y 

- The BFS is available 

- The BFS was mid-value'selecting IMU's 

- All IMU commfault flags are off in the BFS 

- All IMU fail flags are off in the BFS 

- The BFS is prime selecting an IMU 


THEN 

- Notify the operator that BFS has changed IMU status due to crew 

- '-fi'Ji cy<\aTTP AA 5 / ■j now ffirxp cr n IT rr] IA 

(7) IMU Deselected BFS (Not Engaged, Part 2) 


IF j2_ / j f 

- The BFS is wvM* 

- The BFS is not engaged 

- The BFS was prime selecting an IMU 

- The commfault flag for that IMU is off in the BFS 

- The fail flag for that IMU is off in the BFS 

- The BFS is now prime selecting a different IMU 
THEN 

- Notify operator that the formerly selected IMU has been deselected 

"A J&Jrf-f 0f&>aiz>£ ,6 AS /V, o <.0 nfiifTsp X fT>U 

(8) IMU Deselected BFS (Engaged) ; 

- The BFS is 

- The BFS is engaged 

- An IMU has been available to the BFS,„ 

- The deselect flag for that IMU is on the BFS 

THEN * 

- Notify operator of crew deselection in the BFS. 

- Conclude that the IMU is unavailable to the BFS due to deselection 


(9) IMU Reselection BFS (Engaged) 

IF 

- The BFS is engaged 

- An IMU has been unavailable to the BFS due to failure or deselect 

- The fail flag for that IMU is off in the BFS 

- The deselect flag for that IMU is off in the BFS 
THEN 

- Notify operator of crew reselection. 

- Conclude that the IMU is now available to the BFS. 

(10) IMU Change BFS 

IF 9 

- The BFS is <£& 

- The fail flag or commfault flag for an IMU is on in the BFS 

- That IMU was the prime selected IMU or the BFS was mid-value 
selecting 

THEN 

- Notify operator of a change in BFS IMU status due to commfault or 
failure . 
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d. Outputs 

( 1 ) BFS downmodes 

(2) BFS upmodes 

(3) Changes in selected IMU in the BFS 

e. Support Calculations 
None. 


3.4.2 Error Growth 

This section's purpose is to detect an IMU that is going bad, isolate which 
IMU is going bad, predict whether that IMU will fail in the next minute, and 
determine the magnitude of the IMU error. 


3.4.2. 1 Error Detection 

The comparisons in this section can be done with an IMU that is not availa- 
ble for NAV. This is done only so that, if there is a problem at the two 
IMU level, the IMU not available to NAV can be used to help isolate the bad 
IMU in some circumstances. The term "valid" in the following sections means 
that an IMU can be used in comparisons with other IMU's; it does not refer 
to the overall health of an IMU or to its suitability for use in the onboard 
system. 

All comparisons are either good, over half of the RM threshold, or over the 
RM threshold. 

3. 4. 2. 1.1 Velocity comparisons . - 

a. General Information 
None. 

b. Inputs 

(1) Velocity differences 

(2) IMU status (PASS) 

(3 ("^engage 

t 

c. Rules/heuristics/concepts 

(1) Valid Velocity n 

IF pfi-i S 

- The cBLS -Ts not engaged ^ 

- An IMU is not commfaulted 

- That IMU is good or is suspect due to drift 
THEN 

- Conclude that velocity comparisons with that IMU are valid. 
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(2) Invalid Velocity n 

IF t s 

- The rgFS 'la no t engagecD"* 2 - 

- An '’tMU 13 commfaulted or is suspect due to anything but drift 
THEN 

- Conclude that velocity comparisons with that IMU are invalid. 

(3) Velocity Comparison (Part.1) 

IF pASS 

- The <BFS is not engaged^ — ■€- 

- IMU A is not commfaulted 

- IMU B velocity is valid 

- Velocity comparison A-B is different from IMU A's earlier velocity 
comparison status 

- IMU C velocity is invalid 
THEN 

- Change IMU A's velocity comparison status to current A-B comparison 
status . 

(4) Velocity Comparison (Part 2) 

IF >M£S /h 

- The 4ES_ 1 s not engaged 

- IMU A is not commfaulted 

- IMU B velocity is valid 

- Velocity comparison A-B is some status (call it status- 1) 

- IMU C velocity is valid 

- Velocity comparison A-C is some status (call it status-2) 

- The smaller of status- 1 and status-2 is different from IMU A's 
earlier velocity comparison status 

THEN 

- Change IMU A's velocity comparison status to the smaller of status- 
1 and status-2. 

d. Outputs 

Velocity miscompare indicators. 

e. Support Computations 
None . 

3.4.2. 1.2 Attitude comparisons . - 
a. General Information 
None. 


b. Inputs 


(1) Attitude differences 

(2) IMU status (PASS) 

( 3 )<^F^ engage 


A K 


7)5 5 


3.4-7 



87FM15 


Rules/heuristics/concepts 


(1) Valid Attitude 
IF 

- The ffiS - is not engaged> — ^ 

- An IMU is not commfaulted 

- That IMU is good or is suspect due to accelerometer bias 
THEN 

- Conclude that attitude comparisons with that IMU are valid. 


(2) Invalid Attitude (] 

IF / AS 

- The d3FS is not en^gelf r-^ 

- An IMU is commfaulted or is suspect due to anything but bias 
THEN 

- Conclude that attitude comparisons with that IMU are invalid. 


(3) Attitude Comparison (Part 1) 

IF 

- The^^fF^is (no^^fngaged 

- IMU A is not commfaulted 

- IMU B attitude is valid 

- Attitude comparison A-B is different from IMU A's earlier attitude 
comparison status 

- IMU C attitude is invalid 
THEN 

- Change IMU A's attitude comparison status to current A-B comparison 
status. 


(4) Attitude Comparison (Part 2) 

IF ,'s 

” IMU A is not commfaulted 

- IMU B attitude is valid 

- Attitude comparison A-B is some status (call it status- 1) 

- IMU C attitude is valid 

- Attitude comparison A-C is some status (call it status-2) 

- The smaller of status- 1 and status-2 is different from IMU A's 
earlier attitude comparison status 

THEN 

- Change IMU A's attitude comparison status to the smaller of status- 
1 and status-2. 


d. Outputs 

Attitude miscompare indicators. 

e. Support Computations 
None. 


3 . 4-8 



87FM15 


3. 4. 2. 1.3 Accelerometer (ACC) comparisons , 
a. General Information 
None. 


b. 


c. 


Inputs 

(1) ACC differences 


(2) IMU availability (PASS) 

(3) Reference IMU 

(4) ACC delta-T f) 

(5) P/)S5 

Rules/heuristics/concepts 


(1) Valid to Use ACC Comparison 

IF cz_ 

- The (^FSTis ijolengaged 

- The' ACC delta-T > 30 sec 
THEN 

- Valid to use ACC comparison. 

(2) Valid ACC 

IF 9 S Is -^v'cjPc^^O^ 

- An IMU is not commfaulted 

- That IMU is good or is suspect due to resolver 
THEN 

- Conclude that ACC comparisons with that IMU are valid. 

(3) Invalid ACC j\ 

IF Ph-SS rs +*<K*a*Of- 

- An IMU is commfaulted or is suspect due to anything but resolver 
THEN 

- Conclude that ACC comparisons with that IMU are invalid. 

(4) ACC Comparison (Part 1) 

IF SS is 

- IMU A is not commfaulted 

- IMU B ACC is valid 

- Worst axis ACC comparison A-B is different from IMU A's earlier ACC 
comparison status 

- IMU C ACC is invalid 
THEN 

- Change IMU A's ACC comparison status to current A-B comparison 
status . 


(5) ACC Comparison (Part 2)^, 

IF f/K5 

- IMU A is not commfaulted 

- IMU B ACC is valid 

- Worst axis ACC comparison A-B is some status (call it status-1) 

- IMU C ACC is valid 

- Worst axis ACC comparison A-C is some status (call it status-2) 

- The smaller of status-1 and status-2 is different from IMU A's 
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earlier ACC comparison status 
THEN 

- Change IMU A's ACC comparison status to the smaller of status- 1 and 
status- 2 . 

( 6 ) Worst Comparison a 

IF 7 f-4 PA^-S »\> 

- Exactly two good IMU’s are available 

- Those two IMU’s disagree in any way 
THEN 

- Conclude that two-level isolation must be used to determine which 
of the two IMU's has a problem. 

d. Outputs 

ACC miscompare indicators. 

e. Support Computations 
None. 


3. 4. 2. 2 Error Isolation 

3. 4. 2. 2.1 Three-level isolation . - 

a. General Information 

At the three-level with no suspect IMU's, use the following fault matrix 
with a miscompare indicated for an IMU if it disagrees with both of the 
other IMU's. 

A table drawn up to categorize the type of error that probably exists 
when problems have been isolated to a component is as follows : 



3 . 4-10 



87FM15 


NOTE: ACC means either ACC-x, ACC-y, or ACC-z. 

o means okay; y means yes, there Is a problem (i.e., an IMU 
miscompared with both other IMU's). 

b. Inputs 

(1) Velocity miscompare indicators 

(2) Attitude miscompare indicators 

(3) ACC miscompare indicators 

(4) IMU availability (PASS) 

c. Rules/heuristics/concepts 

Three-level Component Isolation 
IF 

- The^^fl) is (no), engaged 

- There are three good IMU's 

- An IMU disagrees with the other two IMU's 
THEN 

- Use the fault matrix to determine the problem with the IMU. 

- Notify operator of an IMU problem. 

d. Outputs 

IMU quality rating. 

e. Support Computations 
None. 

3. 4. 2. 2. 2 Two-level isolation . - 
a. General Information 

When a miscompare exists between the two remaining good IMU's, four 
methods can be used to determine which IMU has the problem. The results 
of these methods is combined via a voting scheme. 

• Method 1 . Check A/GND and B/GND (where A and B are the two remaining 

IMU's) to see if exactly one is over the threshold. If so, vote 1 

for that IMU; otherwise vote zero for both. 

• Method 2 . Check state vectors A and B to see if exactly one is bad. 

If so, vote 2 for that IMU; otherwise vote zero for both IMU's. 

• Method 3 . Let A be the reference IMU for the ACC comparison. If ACC 

miscompares are in the X-Y plane or in the Z axis (but not in both), 
vote 1 for A. 

• Method 4 . If IMU C is valid in velocity, attitude, or ACC, use valid 
comparisons with IMU C to check IMU's A and B. If exactly one IMU 
disagrees with C, vote 1 for that IMU. See section 3.4.2. 1 for a 
definition of a valid comparison. 
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If either IMU outvotes the other by two or more, that IMU is declared 
suspect. 

Once the IMU has been Isolated, use comparisons with the other. IMU and 
the fault matrix In section 3. *1.2. 2. 1(a) to determine the problem with 
the bad IMU. 


b. Inputs 


(1) 1,2,3/GND IMU differences 

(2) 1,2,3/GND state errors 

(3) Velocity miscompare indicators 

(4) ACC miscompare indicators 

(5) IMU availability (PASS) 

(6) Reference IMU 

(7) IMU quality rating 

(8) High-speed trajectory determinator (HSTD) status 

(J7) <rV_ 

c. Rules/heuristics/concepts 


(1) Two-level GND Comparison 

l? ~jU r*> pf-c^taecQ. 

- HSTD is good ^ ^ 

- An error between IMU’s A and B has been detected at the two-level 

- Worst axis GND-IMU A comparison is some status (call it status-a) 

- Worst axis GND-IMU B comparison is some status (call it status-b) 

- GND-IMU comparison has not yet voted 
THEN 

- When status-a = status-b, vote zero for both IMU’s. 

- Otherwise, vote 1 for the IMU with the larger difference and zero 
for the other IMU. 


(2) Two-Level GND Cannot Vote 
IF-rie P A5 "5 

- An error between IMU's A and B has been detected at the two-level 
( TSnD comparison — *2 

- The HSTD is not good 

- GND-IMU comparison has not voted yet 
THEN 

- Vote zero for IMU's A and B. 


_ S7a^<? /“vt /'S 




(3) Two-level State Comparison 

IF PMS rs e»AQcv*<>. _ 

- HSTD is good____2— " 7 

^Mie r owavo sca n n i ng beam landing system (MSBLS ) - i s n ot pr oc e ssings 
- an d n e v e r* has pr &e eooad -^ 

- An error between IMU's A and B has been detected at the two-level 

. Estate comparison^ — € ■> 

,^T^*State -A comparison is some status (call it status-a) 

^-^State-B comparison is some status (call it status-b) 

- State comparison has not voted yet 
THEN 

- When status-a = status-b, vote zero for both IMU's. 
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SO' J<\ 


l.&A 


( 4 .^ 7~*oo Le'Jpt Cannot 

JF JO 

- The PASS /S pry^P^X 

- T/^ fE>TD /5 A^T" <^c>D C7/^, ^-5yt>^9 n<rn! no90JIVL 

- (SrKb'-'Z-'fa'k. r^yafiTc^ /nos rvH i/oiocP y-p'J 

THEN 

“ i/^^f ^ yj/% Xtioi/s /} s 
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- Otherwise, vote 2 for the IMU with the larger difference and zero 
for the other IMU. 

Two-level ACC Comparison 
IF -fU PA5 5 

- An error between IMU's A and B has been detected at the two-level 
ACC comparison 

- IMU A is the reference for ACC comparisons 

- X-axis ACC comparisons A-B is some status (call it status-x) 

- Y-axis ACC comparisons A-B is some status (call it status-y) 

- Z-axis ACC comparisons A-B is some status (call it status-z) 

- ACC comparison has not voted yet 
THEN 

- If status-x, status-y, and status-z indicate the error lies in the 
X-Y plane or Z-axis of IMU A, vote 1 for IMU A; otherwise, vote 
zero for IMU A. 

- Vote zero for IMU B. 

Two-level ACC Cannot Vote 

IF pA ~ SS /i £>r\c^c 

r An error between IMU's A and B has been detected at the two-level 
ACC 

- Neither A nor B is the ACC reference IMU 

- ACC comparison has not voted yet 
THEN 

- Vote zero for both IMU's A and B. 

Partial IMU Velocity a 

IF f * 53 ('*S 

- An error between IMU's A and B has been detected at the two-level 
partial IMU velocity 

- IMU C velocity is valid 

- IMU A's velocity comparisons with IMU's B and C is some status 
(call it status-a) 

- IMU B's velocity comparisons with IMU's A and C is some status 
(call it status-b) 

- Partial IMU^cofepknison has not voted yet 

THEN A - 

- When status-a = status-b, vote zero for both IMU's^,,^ * L 

- Otherwise, vote 1 for the IMU with the larger difference and zero 
for the other IMU. 


Partial IMU Attitude 

IF -fU. enof<(^c^ 

- An error between' IMU's A and B has been detected at the two-level 
partial IMU attitude 

- IMU C attitude is valid 

- IMU A's attitude comparisons with IMU's B and C is some status 
(call it status-a) 

- IMU B's attitude comparisons with IMU's A and C is some status 
(call it status-b) 

- Partial IMU 'cbmparison has not voted yet 

THEN A 


- When status-a 


status-b, 


vote zero for both IMU's,, 

£'S 


3.4-13 


/*■ 



87FM15 


- Otherwise, vote 1 for the IMU with the larger difference and zero 
for the other IMU. 

(ft Partial IMU ACC 
7 L F PAS'S /s 

- An error between IMO's A and B has been detected at the two-level 
partial IMU ACC 

- IMU C ACC is valid 

- IMU A's ACC comparisons with IMU's B and C are some status (call it 
status-a) 

- IMU B's ACC comparisons with IMU's A and C are some status (call it 
status— b) of?# 

- Partial IMU,, comparison has not voted yet 

THEN 

- When status-a = status-b, vote zero for both IMU's. 

- Otherwise, vote 1 for the IMU with the larger difference and zero 
for the other IMU. 

(^6 Partial IMU Cannot Vote 
10 IF -fk- PA' SS i'* 

- An error between IMU's A and B has been detected at the two-level 
partial IMU 

- IMU C is invalid in velocity, attitude, and ACC 

- Partial IMU comparison has not voted yet 

THEN 

- Vote zero for IMU's A and B. 


(y6) Two-level Vote Count ~ 

1 1 IF pASJ5 < e 

- GND-IMU comparison rules have cast vl votes for an IMU 
^VState comparison rules have cast v2 votes for that IMU 
-^ACC comparison rules have cast v3 votes for that IMU 

- Partial I MU ^comparison rules have cast v4 votes for that IMU 

THfilrV 71 r —pctfTiAL. 3~miL crft s 

inC/N ' „ *- — fbA7<><; jrnU . c»cc ect-r»fiiSe>* Zyte-s A««,a co^t 

- Compute vote total for the IMU as vl + v2 + v3 + v4. 

j L— -tvS-t 

(y) Two-level IMU Isolation 

12- Ut^ P/VSS -•=> PKxojqn-eck 

- Votes for IMU A exceeded votes for IMU B by two or more 


1/5" 

C y,-> /i °s -f(yC £r> i « 

V6 


THEN 

- Conclude that IMU A has an error. 


( 1^) Two-level Component Isolation 

I 3 1 F tU pa-£S t-> 

y - An error between IMU's A and B has been detected at the two-level 
component isolation 

- IMU A is the one with the problem 
THEN 

- Use the fault matrix to determine the problem with IMU A. 

- Notify operator of the problem. 

- Clear the miscompare indications for IMU B. 
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( y^) Two-level Cannot Isolate 

IP t^c, PASS e^\ nr \-ec l 

- Votes for IMU A did not exceed votes for IMU B by two or more 

- Votes for IMU B did not exceed votes for IMU A by two or. more 
THEN 

- Notify operator that the IMU error cannot be Isolated. 

(Ijtf Change IMU Quality a 

IF rs ^ f’O- 

l5 - An IMU was^diagnosed as having a problem ^previously 

- That IMU 's comparisons now indicate a different diagnosis 

- The new indicated diagnosis is a bias, resolver, or drift, or 
is no problem at all 

THEN 

- Update the IMU's quality rating to reflect the new diagnosis. 

- Notify the operator of the new diagnosis. 

d. Outputs 

IMU quality rating. 

e. Support Computations 
None. 



3. 4. 2. 3 Error Magnitude 

a. General Information 

It is desirable for notification messages to contain the following in- 
formation: who, why, and magnitude. For example, "IMU# <who> has a 

<why> of <magnitude>; It < should/should not> fail." Magnitude 
information is used to make the "should/should not" determination. 

Algorithms exist to do this, including using the largest compare 
(largest valid compare). 

b. Inputs 

(1) IMU quality rating 

(2) Velocity differences 

(3) Attitude differences 

c. Rules/heuristics/concepts 

(1) Bias Magnitude 

IF -jLc i *> on ^<njpc> 

- IMU A has an accelerometer bias 

- IMU B velocity is valid ***,•■< nix**** ^ w'j. to-.,- A-f 

- IMU C velocity is invalid or IMU C has a ^a w er n umbe r than (S A 

THEN A r % 

- Compute the magnitude of the bias using the A-B pairwise velocity 
comparison . 
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- Notify operator of the magnitude of the bias. 


(2) Resolver Magnitude n 
If -tird PAV> er^e^o^S- 
~ IMU A has a resolver error 

- I MU B attitude is valid fi . re -fa 

- IMU C attitude is invalid or IMU C has a (tower num hpri than 

THEN / * t * 

- Compute the magnitude of the resolver error using the A-B pairwise 
attitude comparison. 

- Notify operator of the magnitude of the resolver error. 



Drift Magnitude . 

IF -fa pa c.s o 

- IMU A has a drift 

- IMU B attitude is valid ro ~f '^nfa 

- IMU C attitude is invalid or IMU (C-' has a dower numbeb than 0) 

THEN ^ ' V Z 

- Compute magnitude of the drift using the A-B pairwise attitude 

compar ison^ „ fU. ^ ! hi . f of A . 

- Notify operator of the magnitude of the drift. 


V rwu, A~~& Ct 


T* 


d. Outputs 


(1) Accelerometer bias 

(2) Drift rate 

(3) Resolver error 




3 


e. Support Computations i ^P 1 ' 

C 

For velocity (bias), ' a ° 

magnitude = 20£ 

(SQRTjlargest- valid-velocity-difference) 
(units of micro-g's) 


For attitude (resolver), 
magnitude = deg /rad * 

(SQRT largest-valid-attitude-difference) 
(units in degrees) 


For attitude (drift), 

magnitude = sec/hour * (resolver-t - resolver-o) / 

(t - t-o) 

(units in deg/hr) 

o is at some initial time (e.g., deorbit prep). Resolver-t and 
resolver-o are computed by the resolver magnitude equation above. 

It should be noted that, at the two level, for example, if IMU 1 is 
failed, 2-3 is the compare to use. 
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3 . 4 . 2. 4 Failure Prediction 

a. General Information 

Failure prediction is based on miscompares which exceed an RM threshold. 
Recall that error detection and isolation are based on miscompar isons 
exceeding half of an RM threshold. 

b. Inputs 

(1) IMU selection filter command 

(2) Velocity differences 

(3) Attitude differences 


Rules /heuristics /concepts 


(1) Three-level Failure Prediction 

IF n 

- Onboard IMU RM is at the three-level /fallurerpredictio^ r^ ' 

- Exactly two pairwise differences exceed the rail threshold in 
either velocity or attitude 

- A failure has not been predicted yet 
THEN 

- Predict RM will fail the IMU common to the two pairs that exceed 

the threshold 

A 

(2) Three-level No Failure Prediction 
IF 


- Onboard IMU RM is at the three level(£Sh no I'aUure prediction' 

- All three pairwise differences in velocity or attitude exceed the 
fail threshold 

- A failure has not been predicted yet 
THEN 

- Predict IMU RM will not take any action. 


Op<?£o 


(3) Two-level Failure Prediction 

- Onboard IMU RM is at the two level ( failure protect ion r^L 

- IMU A is available but not good 

- IMU B is available and good 


- IMU's A and B differ in velocity or attitude by more than some 
threshold 

- A failure has not been predicted yet 
THEN 


credicted yet j + 

i si, -fr T0f- A' 11 -' 


Predict an RM action and^ 
failed . 


IMU A is the one that needs to be 


(4) Check Bite 


When at two level and IMU A has bite and IMU B is bad, predict that 
RM will fail the wrong IMU. This must consider the possibility of 
needing a test on previous rules to know that IMU RM will do anything 
at all. 
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d. Outputs 

Predicted IMU failure. 

e. Support Computations 
None. 


3.4.3 Recommended Actions 

R£convV£*tf>A7ioAJ S 

3.4.3 . 1 PASS IMU 

/v 

a. General Information 
None. 

b. Inputs 

(1) IMU availability (PASS) 

(2) IMU quality rating 

• (3) A fr frrfe tido IMU — ^ 

ir~ 

c. Rules/heuristics/concepts 

(1) Reselect IMU a ^.'^ v 0 * 6 . e SWeM*'-' 

IF 

- An IMU is unavailable to the PASS due to deselection 

- That IMU is good 
THEN 

- Recommend that IMU be reselected (after zero delta state if three- 

state NAV is still active)^r®^ . -xKnt<. b&. 

3-^-hie ? 0r A -? 

(2) Help IMU Dilemma /u ^ - 

IF 

- IMU RM is in dilemma 

- IMU A is available to the PASS and is good 

- IMU B is available to the PASS and is not good 

THEN ^ / — , Ji- 

- Recommend deselecting IMU B^. _j_ fr\U <7, wwx 

(3) Cannot Help IMU Dilemma 
IF 

- IMU RM is in dilemma 

- IMU A is available to the PASS 

- IMU B is available to the PASS 

- Either A and B are both good or A and B are both not good 
THEN 

- Notify operator that dilemma cannot be resolved. 

(4) Incorrect IMU Failure 
IF 

- IMU A is unavailable to the PASS due to failure 
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- I MU A is good 

- IMU B is available to the PASS 

- IMU B is not good 
THEN 

- Notify operator of incorrect RM isolation and recommend switching 
to IMU A. 

(5) Deselect Commfaulted IMU 

- An IMU is unavailable to the PASS due to commfault(^for some amount^) - ^ 
( f~of tim'C > 

- That IMU has not been deselected 
THEN 

- Recommend deselecting the IMU. 

d. Outputs 

PASS deselect/reselect messages. 

e. Support Computations 
None . 

Rtcoiri/vtKOATi&tiS 

3. 4. 3. 2 BFS IMU Aeti o ns — g - 

A 

a. General Information 



A general rule for BFS IMU's is that an IMU should not be available in 
BFS if it is not available in PASS, unless it is the only one left in 
BFS. .X-r « L£u_ a c< 

T - >v iif -jj t ■s o"f~ / ai 

b. Inputs * 

(1) IMU availability (BFS) 

(2) BFS IMU 

(3) IMU quality rating 

c. Rules/heuristics/concepts 


(1) Deselect IMU in BFS 
IF 

- IMU A is not available to the PASS 

- IMU A is available to the BFS 

- IMU B is available to the BFS f-' 

the r ■ — £- B 

- Recommend deselecting IMU A in the BFS. 

(2) No BFS IMU’s 
IF 

- The BFS is on IMU A 

- IMU A is unavailable to the PASS 

- Neither IMU B nor IMU C is available to the BFS 
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THEN 

- Notify operator of IMU shortage in the BFS. 

(3) Change BFS IMU (Part 1) 

IF 

- The BFS is on IMU A 

- IMU A is not good 

- IMU A is available to the PASS 

- IMU B is available to the BFS 

- IMU B is good 

- Either IMU C is unavailable to the BFS or has a higher number than 

^ <has)lMU B 

th£r 

- Recommend deselect/reselect IMU A to put the BFS on IMU B. 

(4) Change BFS IMU (Part 2) 

IF 

- The BFS is on IMU A 

- IMU A is not good 

- IMU B is available to the BFS and is good 

- IMU C is available to the BFS but is not good 

- IMU C has a lower number than has IMU B 
THEN 

- Recommend deselect/reselect IMU's A and C to put the BFS on IMU B. 

d. Output 

BFS deselect/reselect messages. 

e. Support Computations 
None. 
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3.5 STATE VECTORS 


3.5.1 State Error Status 
a. General Information 


IF GROUND COMPARES AVAILABLE 
Use this table [see note 3] 


GND-PRI 

GND-BFS 

PFS-BFS 

Call to Guidance 


> 

UPDATE 

> 

XFER 

N/A 

PASS has (error) [see note 
BFS has (error) 

1] 

LIMIT 

Limit 


Need ST. VECTOR UPDATE; No 
required 

XFER is 

H 

> 

GAL 

N/A 

PASS has (error) 

BFS has (error) 

Need ST. VECTOR UPDATE; No 
required 

XFER is 

II 

IN 

Limits 

N/A 

BFS is GO 

PASS has (error) 

Need ST. VECTOR UPDATE; 
No XFER is needed 


> 

GUIDE 

ADV. 

> 

XFER 

Limit 

>GAL 

PASS has (error) [see note 
BFS has (error) 

Need ST. VECTOR XFER 

1] 

LIMIT 

(GAL) 

11 

<GAL 

PASS has (error) [see note 
BFS has (error) 

No XFER is needed 

2] 

•1 

> 

GAL 

N/A 

PASS has (error) 
BFS has (error) 


ti 

IN 

Limits 

N/A 

PASS has (error) 
BFS is GO 


IN 

LIMIT 

> 

XFER 

Limits 

N/A 

PASS is GO 
BFS has (error) 

Need ST. VECTOR XFER 


11 

> 

GAL 

N/A 

PASS is GO 
BFS has (error) 


11 

IN 

Limits 

N/A 

PASS and 
BFS ARE GO 
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NOTE 1: Unless the GND-PRI Is about to violate the update criteria, the 

transfer will take out a significant amount of error in the BFS. 
Otherwise, it might oe better to wait for the GND-PRI error to 
violate the update criteria and treat it appropriately. 

NOTE 2: The error taken out by a transfer is not significant in this case. 

NOTE 3: Prior to main engine cutoff (MECO) 

DELTA STATE 
Post MECO 
WHOLE STATE 


IF GROUND COMPARES NOT AVAILABLE 


PFS-BFS IMU-Situation 

> Two IMU Level 

XFER One BAD IMU 

LIMITS BFS on Good One 

" All 

Other Cases 

> N/A 
GAL 

IN N/A 

LIMITS 

NOTE 4: A transfer would make 


Use this table 

Call to Guidance 

(error) between PASS and BFS 
BFS better than PASS so 
NO XFER needed [see note 4] 

(error) between PASS and BFS 
Need state vector transfer 

(error) between PASS and BFS 
PASS and BFS are TRACKING 
the BFS as bad as the PASS. 


VERIFY STATE VECTOR UPDATE 

when |GND-PRI->~0 

jcall "Guidance the update is onboard" 

VERIFY STATE VECTOR TRANSFER 

when IGND-BFS ' GND-PRI or PFS-BFS ' 0 

jCALL "Guidance we see the transfer" 


b. Inputs 

(1) HSTD health 

(2) GND-PASS 

(3) GND-BFS 

(4) PASS-BFS 

(5) System availability 
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(6) Delta time (DT) (PASS-BFS state vector time tag difference) 


c. Rules/heuristics/concepts 

(1) State Error Change _ ~fLa P 

IF A 

- For,, available systems^^ 

- The system worst axis error is different from what it was on the 
previous cycle 

THEN 

- Record the new worst axis status. 

(2) Report State Error . / // _ __ , 

K _ table 5 

- The cj^t^cL 

- More than 60 sec have elapsed since the last report 

THEN ^ s-f 

- A - fr e po r^ the error on every axis whose status is the same as the 
worst axis. 


(3) 


PASS and BFS Timing Problem 
IF 


The HSTD is not good 
Both systems are available 
The DT is > | 0.00031 

' is a timing problem between the PASS and the BFS. 



(4) PASS BFS Error Change 
IF 

- Both systems are available 

- No timing problem exists between the PASS and the BFS 

- The HSTD is not good 

- The PASS-BFS worst axis error is different from what it was on 
the previous cycle 

THEN 

- Record the new worst axis status. 


(5) Report PASS BFS Error 
IF 


- Both systems are available 

- No timing problem exists between the PASS and the BFS 

- The HSTD is not good 

- More than 60 sec have elapsed since the last report of PASS-BFS 

errors , , 

THEN A ’ //,Yr c-pvvie A «•+ 


-j-Report the error on every axis whose status is the same as the 
worst axis - 


d. Outputs 

( 1 ) State error messages 

(2) Timing problem between the PASS and the BFS 
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e. Support Computations 

The following table is valid for GND-PASS, GND-BFS, and PASS-BfS: 




Update/ 


Update/ 


Update/ 


M50 

UVW 

Suspect XFER 

Suspect 

XFER 

Suspect 

XFER 



Z 

U 

6K 

12K 

3K 

6K 

1.5K 

3K 

X 

V 

24K 

48K 

3K 

6K 

3K 

6K 

Y 

W 

24K 

48K 

3K 

6K 

3K 

6K 

dZ 

dU 

50 

75 

50 

75 

50 

75 

dX 

dV 

50 

75 

50 

75 

50 

75 

dY 

dW 

50 

75 

50 

75 

50 

75 



| I OBH > 

130K 

OBH < 

130K 

II OBH < 

90K | 


and 
> 90K 


Results from this table will be such that 

GND-PASS = good/suspect/over 
GND-BFS = good/suspect/over 
PASS-BFS = good/suspect/over 

All units are in ft and ft/sec. 


3.5.2 Delta State Update 
a. General Information 


None. 


Inputs 


( 1 ) HSTD status 

(2) GND-PASS 

(3) GND-BFS 

(4) Engaged system 

(5) Doing a delta state (ONAV input) 

(6) Drag auto/inhibit/force (A IF) flag 

(7) & -T «cL1l t 1 air navigatkig /yrACAN^^IF flag 

(8) ^Air -data transducer ass e mbl y ^ADTA^) AIF flag 

Rules/heuristics/concepts A 


(1) Need Delta State 

^ ^ ^ '• ffSTO 'S-cS* 

the engaged system 


l?rU 
- For 
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- GND-system shows the system 

THEM A p 

delta state, is needed. 


is above the update limits 


(2) Okay for Delta State 

if A*** T *r 

- A delta state is needed 

- GND and engaged system runways are the same 
THEN 

- Recommend a delta state update. 


(3) Not Okay for Delta State 
IF ffa. i-h^7 f) is 

- A delta state is needed 

- The GND and engaged system runways are not the same s-\ 

THEN 

- Notify operator that a delta state is needed but(thgj^ there is a 
runway mismatch. 

(4) Inhibit Filter Processing 
IF jIm? Hsro iz 

~ Doing a position and velocity delta state 

- For the engaged system s 

- The drag, TACAN, and^ADTA flag are NOT inhibited 

THEN ** * 

- Notify operator that (sensor) is not inhibited and needs to be 
inhibited before the delta state (include Item entries). 


(5) 


Delta State Is in BFS 
IF 


- BFS is engaged 

- Delta-state is in progress 

- GND-system errors were^pot close to zero previously 

- GND-system errors are now dlose" to zercTr u ~ “1 \ 

-^-Repoe^ that state update^Ls—^. 


d. Outputs 


(1) Delta-state recommendation 

(2) Delta-state NO GO due to runway mismatch 

(3) Inhibit measurement recommendation 

(4) Delta state in 


e. Support Computations 

"Previously not close to zero" and "are now close to zero" refer to a 
comparison between the current measurement and previous measurement. 

- sfs- -;o -5/ 

OfiAC b 9 3 

/\£>T /) i p l> i b< ~ > A"a i o-Cs 
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3.5.3 BFS Transfer 

a. General Information 
None . 

b. Inputs 

( 1 ) HSTD status 

(2) GND-BFS 

(3) System availability 

(4) PASS state error status 

(5) PASS-BFS state error status 

(6) PASS-BFS timing problem status 

■ — (7) D e lta - state in p ro g r ess 





c. Rules/heuristics/concepts 

(1) Need Transfer - (Port 1) — - 
IF 

- Good HSTD 

- Both sy stems available 

- GND-BFS^ update limit 




- RASS state error status is good.oR 
THEN 

- Recommend a transfer to the BFS. 


S t kc*» ** B*<> 

~fU fM. gpB . 7 . I 


-fU> /M<,5 S /X S’ - 'P v O 





— /W? -hrru^C- PWlfi S 

pass 



/1 2) Transfer (Part"?)- — 

IF 

- Good HSTD 

- Both systems available 

- GND-BFS > update limit 

- PASS state error status is suspect ' x 

- No PASS-BFS timing problem v 

- PASS-BFS status is suspect or bad 
THEN 

- Recommend a transfer to the BFS. 

(3) Need Transfer (Part 3) 

IF 

- The HSTD is good 

- Both systems are available 

- GND-BFS > update limit 

- Delta-state is in progress 
THEN 

- Notify operator that a transfer will be needed after the state 
vector update. 

(4) Do Not Do a Transfer (Part 1) 

IF 

- The HSTD is good 

- Both systems are available 





> c tTs! . ;qua 

GOIDKFV J0;3fi IQOSMffTS S SQUARES 
*07 J 7 7RO SHEETS b SQUARES 



3 .5" 4 


& 


Tfr*rt&fe/t -jTn 
TP 


- /M&S -Pas f*c>s, Ab/M c/ *e s op. e. 

n<?<-o i 'i~c> 

- Pass -B ps (x*/i/bt* o//Wawps 

o^ e /» f>fleu/'oos*/y 

TH 

- /Vo'ft'ff &p><*J)c?fdA )f/iodt BP S j7Q^s PpA /~s > 


(k) fheoAoos p*?ss BPs efiAoA 




'(m£'H£4£ 


TF 


- jUl PAsS-BFS pes/ t4o/o Jb'fPe^ces ^ 

Pa lA^/ve* / 7^ M-> P £ c? ip 

y^N2. /pfipu/oos ppc/e 
TfiBrrJ 


— 0 pcJ<?'J~p > 7^^ pP-Pd/OO s PAssBa^ ~QJi>u>~ri 

J, ^f-'- A ~ ~ 


-ppp c^O f 
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/ - GND-BFS > update limit _ 

- PASS state error status is suspect 

- PASS-BFS state error status is good 
THEN 

- Notify operator that no transfer is needed because it will not 
improve the BFS much. 

(5) Do Not Do a Transfer (Part 2) 

IF 

- The HSTD is good 

- Both systems are available 

- GND-BFS > update limit 

- PASS state error status is suspect 

- There is a PASS-BFS timing problem 
THEN 

- Notify operator that NO transfer is needed because we are not 
sure how much it will improve the BFS vector. 


(6) Transfer When No HSTD 
IF 

- The HSTD is not available 

- Both systems are available 

- PASS has at least one good I MU 

- BFS prime selecting is bad or suspect IMU 

- PASS-BFS error is bad 

- No PASS-BFS timing problem 
THEN 

- Recommend a transfer to the BFS (any other situation could possi- 

___ bly corrupt the BFS with a transfer). ^ 


Outputs 

(1) Transfer recommendation . , 

(2) C o nfirmation oA transfer ^ TH 
£<6 PASS - BPS 

Support Computations 


None. 
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3.6 THREE-STRING STATE VECTORS 
a. General Information 


b. 


Three-string NAV is active when the number of microwave landing system 
(MLS) measurements processed by NAV is zero and the PASS is the engaged 

C~fb Fo/hvO/ri<y /TV S. S c rne ? - s t& 1 (e 

d erCTiyJQ by J I i~ , 

"P P Or* a'fiez H'e 

"5 — >A ooco^s. 


system. 

Inputs 


(1) HSTD health 

(2) GND-1,2,3 state errors 

(3) State differences 

(4) IMU fail and commfault flags 

(5) IMU health 

(6) Delta state in 


c. Rules/heuristics/concepts 

(1) Ground-to-State Comparison 

- The HSTD is good 

- A state vector ^had a certain quality rating .previously i 

- Comparison with the ground indicates a different quality 

THEN 

- Change that state vector's rating to the quality indicated by the 
ground comparison. 

(2) State-to-State Comparison (Part 1) 

L F i'm^TiOe. - III 

- All three IMU's are wg^FOTmmfauTT?^ Q A \Jcj( !o ol £ 

- The HSTD is not good or n o t avail a ble Q 

- State A previously had a certain quality rating 

- Comparison with states B and C indicates a different quality 

THEN 

- Change the quality rating of state A to that indicated by com- 
parisons with states B and C. Use the best rating between states 
B and C. Do this check if an IMU is not available because it has 
been deselected. This will enable ONAV to check the state vec- 
tor's health before the IMU can be reselected. 


(3) 


State-to-State Comparison (Part 2) 

^ f\a\j i -_> ac 7 I^ e ( , LI, 

- Two^IMU's are h ot oommt'aulte d t ^ 

- The HSTD is not good or n e t availabl e — 

- State A previously had the same rating as state B 

- IMU A previously had the same rating as IMU B 

- State A comparison with state B has a different rating 
THEN 


- Change the quality ratings of both states A and B. 

-t or Of inability Lu t ell Ulii t- eh rt a l- p i gning h a .-| „ 


Ajc 






> c 


h 




3 . 6-1 



87FM15 


(4) State-to-State Comparison (Part 3) 

I? 

- Twd^TMU' 


's are 


af Ti\je 

^SBBtt£as&£& - 


£L 






- The HSTD is not good er n otr -availa ty l e 

- State A*had the same rating as state B previously , 

- IMU Aa haH a better rating than IMU~B^prev~iously ! 

- State A~comparison with state B has a different rating 
THEN 

- Change state B's quality rating to the new one; leave state A's 
quality rating as it was. 


(5) State-to-State Comparison (Part 4) 

IF -3 sftvj p ajou 

- Two^lftfi's are -n ot oommfaulfc e d — ^ <rt 
The HSTD is not good -or available — Q - 


, lot b In- 


state A^had 


: -ke&ter rating -than state Bipreviously / 


- State A comparison with state B has a different rating (than state’ 

B 'c ratin g — ^ ^ y 

THEN ^ 

- Change state B's quality rating to the new one; leave state A's 
quality rating as it was. 


( 6 ) Zero Delta State Occurred 
IF 3 -Sts') £ * ve *v f acTiv^L 
^A^eftfa^state £ srn ptr =$ rr 


-p rogTcg g 


f\o s r\c f jJL, 


- All three pairwise state differences go to zero 
THEN 

- Notify operator that zero delta state occurred. 

(7) Delta State Occurred 

IF -3-S^^rvQv; f*. active ^ 

- rt fflef^T^tate It in pr»r>gnnsgi S*~ AePr\ f.etomm'P/vcAjA 





— CdC 
r\n u / s 

i V e 


IvA. fid 

I C 


nc 
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3.7 DRAG ALTITUDE 


3.7.1 Drag Flag Status 

a. General Information 

Drag altitude is used for limiting altitude errors. This group watches 
for changes in the drag filter flag. 


b. Inputs 


(1) Filter flags 

(2) System availability 

c. Rules/heuristics/concepts 


r ot OFF i S 


(A Drag Filter Flag Changed 
IF 

- For available systems 

- The current value of the drag filter flag is^different from its 
previous value 

THEN 

\ - Conclude that the value has changed. 


Tl 


- Notify the operator. 


the new value.' 1 Process 

A 


d. Outputs 


(1) Change in the drag filter flag 

(2) New value of the drag filter flag 

e. Support Computations 60 ^ 

None. 




^ j n i 


3.7.2 Drag Recommendations 

a. General Information 

This group determines a recommended setting for the drag altitude AIF 
switch. 

b. Inputs 

(1) Edit ratio for drag 

(2) Drag AIF flag 

(3) Position and VEL delta state flag 

(4) Onboard altitude 

(5) System availahility 
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c. Rules/heuristics/concepts 


(1) Force Drag 
IF 


- For available systems 

- The drag edit ratio is greater than one 

- Drag is not being forced 

- Delta state has not been recommended 

- The altitude is greater than 85.200 ft 

THEN A J 



- Recommend forcing drag. 


(2) Auto Drag 
IF 

- For available systems . 

- The drag edit ratio is less than one (l/) 

- Drag is inhibited or forced 

- Position and velocity delta state has not been recommended 

- The altitude is greater than 85^200 ft 
THEN 

- Recommend that drag be placed in AUTO. 

(3) Inhibit Drag 
IF 

- For available systems 

- Drag is being forced 

- The altitude is less than 85^200 ft 

THEN * 

- Recommend drag be inhibited. 


d. Outputs 

(1) Drag altitude quality 

(2) Recommended AIF setting 

e. Support Computations 
None . 
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3.8 TACTICAL AIR NAVIGATION 

3.8.1 TACAN Configuration 
a. General Information 

This group makes sure that all line replacement units (LRU s) are tuned 
to the correct channel. The following ONAV inputs are assumed. 

- Desired channel number (default is the PRIMARY in the selected runway 
area; other inputs are SECONDARY or NONE) 

- Toggle capability status 

The following flowchart gives an overall look at TACAN configuration 
information : 



b. Inputs 

(1) Engaged system 

(2) Desired TACAN 


c. 


Rules/heuristics /concepts 

(1) Skip TACAN 
IF 

- The wrong runway is se lected in the engaged 
</*f ACAN channel" - NONE _ > 

THEN 

- Disable the rest of the TACAN checks. 
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Channel Changed 
C IF 

- All LRU's are tuned to a different channel than before 

THEN fjrf, fy op of VAe 

- **crb«^change in the selected channel . 

^3^) Toggle TACAN^DmC j-v fc>pct\c^ \ 

L F Fop- ii'6. s/^rr/n 

- The selected channel is not the desired channel 

- The selected channel is in the correct area of the site table 


'-m 


(5\> 


- Recommend toggle TACAN to get to the desired channel. 

-T«c)lccite_ -fU-if >aoa*j / s w-cjo -fAe e*<y*<y><x.-sr"S77rn\ 

General Purpose Computer (GPC) Mode 
\ IF Foft. fk<Z- ^g-ag^cV sr^Trrrx 

j "The selected channel is not the desired channel 

/ - The selected channel is not in the correct area of the site table 

THEN 

- Recommend that the TACAN 's be put in GPC mode. <. 

v - Ttfrfi Ccie / i Ao-g<~ frA 7^€ erc^ny *(X. 5 

Fix LRU Channel . 

I J fo/z Y£e i 

- One LRU is not tuned to the desired channel 

- At least one other LRU is tuned to the desired channel 

v. THEN 

- Recommend that the mistuned LRU be put in GPC mode. 

3l*cl\caje fUai TAcfo j ,'S pc -<^o -ppR X^L Sr*>7£rr\ 

d. Output?- — 

( j) TACAN channel status. . . 

^o5 <S-f*C Rec-oAuneA^ ' ,: ® os 

e. Support Computations 


None. 


3.8.2 TACAN Availabilit\ 
a. General Information 


This group determines which LRU's are available in the Pre- 
determines why the unavailable LRU's are unavailable. 

An LRU is available in range and/or bearing if it is 


- Not commfaulted (LRU-level consideration) 

- Not failed in range or bearing 

- Not deselected (LRU-level consideration) 

- Powered on (LRU-level consideration) 
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Notify operator of changes in availability through the use of status 
lights. There is an overall total of six outputs - three for range and 
three for bearing. 

b. Inputs 

(1) Engaged system 

(2) Commfault flag 

(3) Deselect flag 

(4) Power flag 

(5) Fail flag 

(6) Lockon flag 

c. Rules/heuristics/concepts 


(1) TACAN Commfault 
IF 

- For the engaged system C 

- A TACAN LRU was not^comm faul ted I, previously , r\oP <r- 

- The commfault flag foFTfiat LRU is - now on 

THEN , . , 

- Notify the operator that the LRU is commfaulted (unless the whole 

string is down) . 

- Conclude that range and bearing from the LRU are no longer avail- 
ab 1 e7jo~the P Asifjdue to commfault. 


(2) TACAN Commfault Clear 
IF 

- For the engaged system 

- A TACAN LRU was A commfaulted .previously j 

- The commfault flag for that T.RU is now off 
THEN 

- Notify the operator that the commfault has cleared (unless the 
whole string is down). 

- Conclude that the LRU has the status indicated by the fail and 
deselect indicators. 


(3) TACAN Deselect 
IF 

- For the engaged system 

- A TACAN LRU has been available in either range or bearing 

- The deselect flag for that LRU is on 
THEN 

- Notify the operator of crew deselection. 

- Conclude that the LRU is unavailable in range and bearing due to 
deselection . 

(4) TACAN Power Off 
If 

- For the engaged system 

- A TACAN LRU was A po wered on , previously^ 

- The power indicator~Tor that LRU is now off 
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THEN 

- Notify operator that the LRU has lost power. 

- Conclude that the LRU is not available due to loss of power. 

(5) TACAN Power On 
IF 

- For the engaged system 

- A TACAN LRU was^ powered off i previously; 

- The power indicator for that LRU is now on 
THEN 

- Notify the operator that the LRU has been powered on. 

- Conclude that the LRU has the status indicated by the fail and 
deselect indicators. 

(6) TACAN Failed 
IF 

- For the engaged system 

- A TACAN LRU measurement was available 

- The fail flag for that measurement is on 
THEN 

- Notify the operator of the failure. 

- Conclude^ that^Masurement is no longer available due to failure. 

4 A 

(7) TACAN Reselected 
IF 

- For the engaged system 

- A TACAN LRU has been unavailable due to failure or deselect 

- The deselect flag for that LRU is off 

- Both fail flags for that LRU are off 
THEN 

- Notify the operator of crew reselection. 

- Conclude that the LRU is now available in range and bearing. 

(8) TACAN Locked 

IF a 

For t r ho -e ngagerl system ^ 

- No LRU's wer e A locked on previously ^ 

- An LRU is locked on a measurement 
THEN 

- Notify the operator that TACAN is locking on. 

(9) No TACAN Locked 

IF £ . ^ ppfi-v ■cv'Jy /cc^f'Y^ o T 

-,'F op tho engaged syste m ^ 

- No LRU is locked on a measurement 
THEN 

- Notify the operator that TACAN lost lock. 
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d. Outputs 

e. Support Computations 


availability 
lock status 


None . 


3.8.3 TACAN LRU Quality 
a. General Information 

This group checks LRU measurement errors to determine which LRU's have 
a problem and what the problem is. 

Six quality ratings are possible: three for range and three for bear- 

ing. Quality ratings are based on a line fit of the 10 most recent 
samples of the errors on each LRU. The line fit is computed with the 
least squares method, where time is an independent variable. 

For comparison purposes, TACAN RM can fail one-half of an LRU (e.g., 
range or bearing), whereas IMU RM fails all of an LRU (i.e., there is 
no differentiation between VEL and attitude). 

This section may need respecifying to enable the handling of 

- Channel changes 

- Lack of ground data (relative quality compares) using sigma, m 
(slope), and b (intercept) 

- Use of raw TACAN data (NOTE: Holes in data preparation are implied; 

do not put raw TACAN data of any sort into the fact base currently) 

The four quality types (noise, bias, timing, and good) are character- 
ized as follows : 
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Noise 


(based on the sigma of the line fit 
exceeding a threshold) 

^ 




(based on the slope of the line fit 
exceeding a threshold) 


\ 



M2- 



(based on the intercept of the line 
exceeding a threshold) 


);*«• 


fit 


Good 

- ' ' — — 1 '^ 

Bearing computations should be disabled within the cone of confusion 
(elevation is > 35 deg). Range processing can continue. 


WHEN CHECKING BEARING PLOT 
IF 

— Any range asymptote > +0.2 nautical mile (n. mi.) [see note 1] 
THEN 

- Range is/are bias. 


IF 

- Any range form random pattern > +0.2 n. mi. 
THEN 

- Range is/are noise. 

IF 

- Any bearing asymptote > +1 deg 
THEN 

- Bearing is/are bias. 


IF 

- Any bearing forms random pattern > +2 deg 
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THEN 

- Bearing is/are noise. 

NOTE 1: Determines whether range/bearing problem is bias and/or noise. 


Range 
Bearing 
(Note 2] 

Bias 

Noise 

Good 

BIAS 

COMB 

COMB 

RBBN 

NOISE 

COMB 

COMB 

RBBN 

GOOD 

RBBN 

RBBN 

TAKE 




TACAN 


NOTE 2: Uses matrix to determine which section to go to. 

COMB = combination section 
RBBN = PASS RANGE/BEARING 
BIAS/NOISE SECTION 
TAKE TACAN = data good call 
"Take TACAN" 


b. Inputs 

(1) HSTD status 

(2) GND-OB range errors 

(3) GND-OB bearing errors 

(4) Relative range errors 

(5) Relative bearing errors 

(6) LRU availability 

(7) Cone-of-confusion status 

(8) Raw range data 

(9) Raw bearing data 
(10) Engaged system 

c. Rules/heuristics/concepts 

Determine LRU quality while locked for range and bearing measurement. 
However, do not check bearing measurements while in the cone of confu- 
sion. Perform the checks in the following order for the engaged 
system: 

(j) ^ Cone of Confusion 
^ IF 

- In the cone of confusion 
THEN 

- Ignore bearing measurements. 
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(2) Use GND-OB Errors to Determine Status 
IF 

- The HSTD is good 
THEN 

- The selected errorsTare the GND-OB errors. 

it) Use Relative Errors to Determine Status 

4 IF A 

- The HSTD is not good . , oofl'pA ' 

THEN 

- The selected errors are the relative errors. 

z 1 

(j/l) No Quality Rating'^ParFTj)'^ - ab"sr>h'Hi 

*> IF tu - Fo* ^ 

ite' 

Lfsor is unlocked in the measurement 

- Set temporary rating to NONE. 

(^) No Quality Rating ^~Part 2J ^ - neh'fi'J Q 


- The HSTD is good. ^ , 

- A TACAN LRU is not mi ' Jiy 

THEN A 


IF 


The HSTD is, not „good 


s not good -Foe SfsT&m 

is not av a i l ab l^or ‘d'^un locked f nr 


_ Measuremen n ^ » — « » 

A is nnt availahJa nr nnl 
THEN'* — 


me asur e m ent- B - 


<L 


—&rUt S«wa LRU ft y y 

- Set temporary rating to NONE. ro„*\ -fao lie<£ an 



(6) Noise 
IF 


- The selected error's noise (spread) is greater than half that of 
the RM threshold 

THEN 

- Temporary rating = Noise. 


(7) Timin g^ ^-55-fw Quality b «s>a r^iX^b/cj c, + sJ°p<2- 

^ Fry Lfu*. he, ^ nrr^7l<'0bft /v» '//*£-. p* roivSiC^efc 7J££> C> 'f 

- TH^ cfcmr’r nlnp»- i n pnmtnr than Mia «a 1 npa ±.gftas:hn1rl o I - 

r ° C * r\ C y < 7 <P f y - 

THEN ^ ' 


- Sat tnmpmry rating - Tij U np Co*doA& 'ihi F-fttL Fe>i Ra^/A^. 

Cr 



f (8) Bias^ ~ ~ • — - 

IF 

- The selected error's bias (offset) is greater than half that of 
the RM threshold 

THEN 

- Set temporary rating = Bias. 

(9) Good 

IF 

- No temporary rating (not noise, timing, bias, or none) is given 
yet 
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THEN 

- Tfl m P rirar y 


-ratine = Good 


7 


t 


(/> 

1 


Determine LRU Measurement Rating (Part 1) 

IF 

- HSTD is good 
THEN tu ^vtT 

^T^Surement rating = Temporary rating. 

-potential dilemma flag = OFF. 

Determine LRU Measurement Rating (Part 2) 

IF 5/*S 7^rr\ 

- The HSTD is not good 

- All three measurements are available and locked 

^F^mea^urement rating = Better rating (of good, suspect, or bad) 
P hgtween temporary ratings for AB's and AC's relative errors. 

■^Potential dilemma flag = OFF. 

/ 


(/) 

IO 


Determine LRU Measurement Rating (Part 3) 

IF fke. sysTET^ 

- The HSTD is not good 

- Two measurements are available and locked 

- Both measurements' previous ratings are equal 


THEN, Ac iWl 

-Measurement rating for both measurements 
^their relative error. 

■SjjSet potential dilemma flag to ON. 


Temporary rating for 


{yi) 


n 



Determine LRU Measurement Rating (Part 4) 

IF -fa- 

- The HSTD is not good 

- Two measurements (A + B) are available and locked 

- Measurement A's previous rating is better 4- of good , guspaot, o e- 
than measurement B's previous rating 

THEN , O 

/^^measurement A rating = Previous measurement A rating, 
-sssgjs asurement B rating = Temporary rating for the AB relative 


-0. 


2 rror , 


7v 


Potential dilemma flag = OFF, 


(^4) Determine LRU Measurement Rating (Part 5) 

I ~2_ IF p c ,fi cy 1 ", Sj'^T^/yy 

- The HSTD is not good 

- Only measurement A is available and locked 

- Measurement A’s previous rating = NONE 

- Measurement A’s raw data noise (spread) is greater than half that 
of the RM threshold 

THEN 

s measurement rating = Noise. 

■/'Potential dilemma flag = OFF. 
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(15) Quality Rating Change (Part 1) 

IF 

- A measurement rating has changed 

- Potential dilemma flag = OFF 
THEN 

- Notify operator of change. 



{y4) Quality Rating Change^TPart 

13 IF 


- A measurement rating has changed 

P o ten t ial d il e mma flag - ON 

THEN 



ftp/vrrta, 

- Notify operator of the change and-fch»^the fc*pprt < ;yqt- r Pm 
Hphpri^i j n a uliiili I nil r i II i j I llii i I'lnngr _ 




i. Outputs 

V. / N o t i f y o p er ator of ch a nge s i n timin g- ; — b ias, or Bois e (driv es slat us^^ 
li ghts and /or moesag ee4- p? — - 


e. Support Computations 

Noise, bias, and slope quantities are computed from a line fit computa- 
tion. Take the last 10 data points when doing the fit. For data drop- 
outs, either continue over skip or begin determining line fit over 
again. After a channel change, restart the line fit computation for 
the LRU whose channel changed. 


3.8.4 TACAN Filter Flag Changes 
a. General Information 


This group watches for changes in the TACAN data good flags and filter 
flags . 

b. Inputs 


None. 


c. 


Rules/heur istics/concepts 


- 7 I'*!*# r+ a. T^c-fi^ 


(1) TACAN Filter Flag Changed 
IF 

- For the engage d system , 

- The ^x ggrrenP value of ffi TAOAN fi l t e r flag is different from its 

previous value * 

^ THEN 


- Note the new value. 

- Notify the operator if the new value is "proc ess. 


f? 4 fa 
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— <r d>/?£Ps^o>v4^<5- Ja'hz g^rcC. 'f'tg fs &'f~p of\ 

b*Q/A>6- p/oOPiZSPcQ 

tt/f/u 


— A&'Ji'fy &r-**a'k>ti yb*t 'ffc /Xcl 

fK-PctsJ ftp fy\-0 Aj> AoS 

— (ZTn*>//<r<sCtj^ <^A(b(\ fleets paj V - y^ o'f^-p 
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) TACAN Data Good Flag Changed 

3- IF 

- For the engaged system 

- The current value of a TACAN data good flag is different from its 
previous value 

THEN 

- Notify operator of the new value. 

(/) TACAN Dilemma 
A- IF 

- For the engaged system 

- TACAN dilemma flag is on for either measurement 

THEN j , , 

- Warn the operator.^' a T<*?av\ rvo v&Zel) 

d. Outputs 

f n Notify operator of changes in the filter and in the data good and 
"'dilemma flags. 

e, Support Computations 
None. 


3.8.5 TACAN Toggle Recommendations 

a. General Information 

This group determines whether or not the TACAN ground station has a 
problem. If it does and if a backup is available, toggling is 
recommended . 

The following general comments should be embodied in the rules speci- 
fied later: 

If the same non-good quality rating exists on all locked LRU's (minimum 
of two) for either range or bearing, assume ground station is bad and 
request a toggle. 

If only one LRU is locked, LRU has an error and is below 130K altitude. 

If none locked over to be determined (TBD) sec below 130K ft, there may 
be a bad ground station. 

b. Inputs 

(1) Available LRU's 

(2) Locked LRU's 

(3) Toggle available 

(4) Altitude 

(5) LRU status flags 
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(6) Runway area 

(7) Desired TACAN channel 


c. Rules/heuristics/concepts 


(1) Ground Station Problem (Part 1) 

L F rev ^ 3^57?™ 

- At least two LRU's are locked on to the same measurement 

- All locked LRU's are exhibiting the same problem 

T aZ&/-/V 

- X a n elu des that the ground station has a problem and a toggl e 
* n eeded ^cncfucO £ tS 


NOTE: The above rule could be specified as two rules as follows: 

(a) Three Locked 
IF 

- Number of LRU's available and locked is three 

- At least two LRU’s have same non-good quality (noise or bias) 

- For bearing or range 
THEN 

- Request a toggle. 

(b) Two Locked 
IF 

- Number of LRU's available and locked is two 

- Both LRU's have same non-good quality (bias or noise) 

- For bearing or range 
THEN 

- Request a toggle. 


(2) Ground Station Problem (Part 2) 

IF fom tire 9C3PCV ST'ST&ry 1 

- Only one LRU is available 

- That one LRU is locked 

- That one LRU has an error 
THEN /*/.-:+, cf'pna'icR. 

- ^C o noludo ^ that the ground station has a problem 

(3) One LRU Locked Less Than 1 30K Altitude 
IF 

- Only one LRU is locked 

- That one LRU has an error 

- The altitude is less than 130 000 fto^c* 
THEN^-fv 


'}■€*!_ r><z, -f-f 


-^ Conclud^ that the ground station has a problem. 

r lu(Vjv_ (K j i 

OTE: The following might be considered more “specific than The — 



preceding : 


7 
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(4) 


(a) One Locked LRU - Others Not Available 
IF 

- Number of LRU’s locked is one 

- That one LRU has a non-good quality rating (bias or ndise) 

- No other LRU's are available 

- For bearing or range 
THEN 

- Request a toggle. 

(b) One Locked LRU - Others Available 
IF 

- Number of LRU’s locked is one 

- That one LRU has a non-good quality rating (bias or noise) 

- Other LRU's are available (one or two units) 

- Altitude is less than 130 000 ft 
THEN 

Request a toggle. — — • • 

None Locked at Less Than 130K Altitude 
IF 

- No LRU's are locked a t j ^ rv 

- The altitude is less than 130 000 ft „ 

THEN., y L. cpavt'k*- 

- CotoludA that the ground station has a problem. 

- Cov'lojfc * > 9 ^- 

"N0TET The"ToTTowing rule could be considered similar to the above \ 
rule : 

Zero Locked LRU’s 
IF 

- Number of LRU’s locked is zero 

- For greater than TBD sec 

- Altitude is less than 130 000 ft 
THEN 

- Delay error checking for transitory changing of lock. 


(5) 


(/> 

r 


Incorrect Channel for Runway Area 
IF 

- Runway area is correct 

- TACAN channel is not correct for that area 
THEN 

Recommend call to crew to put TACAN on correct channel. 

Do a Toggle 
IF 

- A toggle is needed 

- Toggle capability is available 

THEN £(,c. c 0 *sirt& ^ 

- Change the desired TACAN channel to the other channel in the 
current area. 
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(/) Do Not Do a Toggle 

6 IF 

- A toggle is needed 

- Toggle capability is not available 
THEN 

- Do not do the toggle. 


d. Outputs 

f/^Toggle Requests/^ Suspending toggle requests when in an operational 
' Situ ation doesnot permit the toggle to be handled also ''' 


& 


/v iv _ 

Support Computations 


- 572177 V s 

mutations J 


None. 


3 . 8.6 TACAN Deselect Recommendations 

Because of the large number of inputs (deselects, fail flags, commfaults, 
lockon flags, measurement errors, etc.), it is impractical to try to enum- 
erate all possible states requiring a deselect. Instead, the deselect 
recommendations are based on a generate-and-test method. For a given 
state, appropriate combinations of LRU's are proposed for deselection. 

Each combination is then evaluated based on predicted impact on navigation 
and the "best" combination is chosen for recommendation to the operator. 


3.8.6. 1 LRU's for Deselect 

a. General Information 

This group looks at problems with the LRU's to determine which LRU's 
might need to be deselected. If none, quit. 

b. Inputs 

(1) TACAN dilemma 

(2) TACAN quality ratings 

(3) TACAN availability 

(4) TACAN lock status 

(5) Altitude 

( 6 ) TACAN data good 

(7) TACAN fail flag 

( 8 ) Go for TACAN 

(9) Two lock flags 

c. Rules/heuristics/concepts 

( 1 ) TACAN Dilemma 

IF fci- 1 eCe'-v'y-cV 72:^ ' 

' TACAN RM is in dilemma 
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- One LRU is known to be bad 

- Another LRU is known to be good 

, , 1 - 

■^'‘Pnrjjdeseleeting the bad LRU^" 1 '- ** ' 

(2) Two LRU's Against One 
IF 

- Two LRU's have a problem 

- The third LRU is good 

- The problem with the two bad LRU's is such that TACAN RM mav fail 
the good LRl' 


THEN 


Cc 


:°XiU 




-^^Pi^deselecting the two bad LRU’s." 5 

(3) Not Two LRU’s Locked 

IF pcC vSt *5 /s ]~£ ^ 

- Two LRU’s are not locked 

- One LRU is locked and good 

- The data good flag is off A j J 

- The altitude is less than 130 000 ft t«.\ '7 Sock, /y 

THEN 


T 

inc -‘Y^'fv^*t,'r Twv ' , ,/ 1 ^ o 

-^Tr^deselecting the two unlocked LRU's^^*^ *»«. 




(4) Noisy LRU 
IF 

- An LRU has excessive noise 
THEN^/JcL r^T 
~ deselecting that LRUj. 

(5) RM Failed Wrong LRU 

if ho* 7*4. enjoyed 

- One LRU has a problem 

- Another LRU is good 

- TACAN RM has failed the good one n 

THEN I jJ L e 

d eselecting the bad one^' v " r * 

(6) Deselect the LRU ~f - » AJoC-O 

IF A 

- The selected measurement from RM is not good enough to "GO for 
TACAN" 

- Deselecting an LRU will remedy the situation . 

THEN fkf a , ■ (J 

- R e oomtn aad deselection of the LRU.' 5 ^"^ ” v 

* C 7^ A 

(7) Deselect Two LRU's 
IF 

- Below 130K 

- Have not met the two-lock requirement in range 
THEN 

- Deselect the two bad LRU's. 
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NOTE: If faced with either a bad range or a bad bearing measure- 

ment, choose a bad bearing. 


d. Outputs 


^Possibility of requesting a deselection of TACAN. 
e. Support Computations 


None. 


3. 8. 6. 2 Deselect Configurations 
a. General Information 

Based on results from section 3.8.6. 1, determine all reasonable dese- 
lection combinations. Each combination is proposed as a separate 
configuration. There are up to seven possible combinations. 

The following is background information that should be contained in the 
rules : 


If one LRU is recommended for deselection, try all of the following 
combinations of deselects: 


- No LRU's (i.e., wait) 

- Only the recommended LRU 

- The recommended LRU with each of the other LRU's that is not comm- 
faulted , not deselected, and powered on 

If two LRU's are recommended for deselection (a and b), try all of the 
following: 

- No LRU's 

- a only 

- b only 

- a and b 

- a and c (if c is not commfaulted, not deselected, and powered on) 

- b and c (if c is not commfaulted, not deselected, and powered on) 

If three LRU's are recommended for deselection, try all - zero, one, 

and two LRU combinations - involving LRU's that are not commfaulted, 

not deselected, and powered on (seven possible combinations). 


b. Inputs 



Possibility of deselection. 
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c. Rules/heuristics/concepts 

(1) Try Zero Deselects 
IF 

- Any LRU's have been proposed for deselection 
THEN 

- Propose a configuration where no LRU's are deselected (i.e., the 
onboard configuration is left as is). 

(2) Try One Deselect 
IF 

- An LRU has been proposed for deselection 
THEN 

- Propose a configuration where that LRU is the only one that is 
deselected . 

(3) Try Two Deselects p 
_IF ~fta. t> s 

~ An LRU has been proposed for deselection 

- Another LRU is not commfaulted, deselected, or powered off 
THEN 

- Propose a configuration where both LRU's are deselected. 

d. Outputs 

Proposed deselections. 

e. Support Computations 
None. 


3- 8. 6. 3 Predicted Availability 

a. General Information 

For each configuration in section 3. 8. 6. 2, compute the predicted 
availability of the three LRU's or how TACAN RM will respond to a 
proposed deselection configuration. 

An LRU is predicted to be available if 

- It is available in the real configuration 

- It is not deselected in the hypothetical configuration; otherwise, it 
is predicted to be unavailable 

b. Inputs 

(1) TACAN availability 

(2) TACAN lock status 

(3) Data good flags 
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(4) Two lock flags 

(5) Relative errors 

c. Rules/heuristics/concepts 

(1) Predict Available . 

IF pxy/c J? £ >y c >7~ip' r \ 

- An LRU is not deselected in a proposed configuration 

- That LRU is available in the real world 
THEN 

- Predict that the LRU will be available in the proposed con- 
figuration. 

(2) Predict Not Available (Part 1) 

IF 

- An LRU is deselected in a proposed configuration 
THEN 

- Predict that the LRU will not be available in the proposed 
configuration . 

(3) Predict Not Available (Part 2) 

- An LRU is not available in the real world 
THEN 

- Predict that the LRU will not be available in any proposed 
configuration. 

d. Outputs 

^Predicted availability. 

e. Support Computations 
None. 


3 *8. 6. 4 Compute Configuration Data 
a. General Information 

Compute the following for range and bearing within all configurations 
from section 3*8. 6. 2: 

- Bias of selected measurement 

- Noise of selected measurement 

- Data good flag 

- RM dilemma indicator 

Each of the above items applies to range and bearing separately. 
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b. Inputs 

(»*) Predicted availability. 

c. Rules/heuristics/concepts 

(1) Predict Data Good Two Locked 
IF 

- Two LRU's are available in a proposed configuration 

- Both LRU's are^ locked on to a measurement .currently ■ 

THEN \ — — ^ 

- Predict that the data good flag for that measurement will be on 

the proposed configuration. A 1 

(2) Predict Data Good One Locked 
IF 

- At least one LRU is available in a proposed configuration 

- That LRU is locked on to a measurement 

- The two-lock flag for that measurement is off 
THEN 

- Predict that the data good flag for that measurement will be on 
in the proposed configuration. 

(3) Predict Data Good One Avail 
IF 

- Only one LRU is available in a proposed configuration 

- That LRU is locked on to a measurement 
THEN 

- Predict that the data good flag for that measurement will be on 
in the proposed configuration. 

(4) Predict Data Good Off 
IF 

- No rule has predicted that the data good flag for a measurement 
will be on in a proposed configuration 

THEN 

- Predict that the data good flag for that measurement will be off 
in the proposed configuration. 

Predict Dilemma 
IF 

- Exactly two LRU's are available for a measurement in a proposed 
configuration 

-bflU J 'S~are -ioclfed on~Fo~trhafr-sie a s u em inent ~ 

- The relative bias between the two LRU's exceeds the RM threshold 
THEN 

- Predict that the RM will declare a dilemma in the proposed 
configuration. 


I Ik kj 


(5) 
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( 6 ) 


Predict No Dilemma 

if u i 

- Not rule has A predicted that RM will declare a dilemma in 
proposed configuration 
THEN 


< Z. 




- Predict that RM will not declare a dilemma in the proposed 
configuration. 


(7) Predict Error One Level 
IF 

- The data good flag is on for a measurement in a proposed 
configuration 

- One LRU is available and locked 

- The other two LRU's are either unavailable or unlocked 
THEN 

- Predict that the selected measurement bias and noise is the same 
as that of the available LRU. 


(8) Predict Error Two Level 

IF 

- The data good flag is on for a measurement in a proposed 
configuration 

- Two LRU's are available and locked 

- The other LRU is either unavailable or unlocked 

THEN 

- Predict that the selected measurement bias and noise is the 
average of the available LRU's. 

(9) Predict Error Three Level 

IF 

- The data good flag is on for a measurement in a proposed 
configuration 

- All LRU's are available and locked for that measurement 

THEN 

- tlie selected measurement bias and noise is the same 
as L oot . currently^£lected by RM. 

d. Outputs 


(1) Predicted data good 

(2) Predicted dilemma 

(3) Predicted measurement bias and noise 


e. Support Computations 


For bias and noise 

(1) Let mu-i, sigma-i = bias, noise on LRU i, i=1,2,3 

mu-sel, sigma-sel = bias, noise on currently selected data 
mu-p, sigma-p = predicted bias and noise for hypothetical 
configuration 
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(2) If configuration prime selects LRU i f 
mu-p = mu- i 

sigma-p = sigma-i 

(3) If configuration averages LRU i and j, 
mu-p = 1/2 (mu-i + mu-j) 

sigma-p = 1/2 (sqrt ((sigma-i * sigma-i) «■ (sigma-J * sigma-J))) 

(4) If configuration is (mid-value select) (MVS), 
mu-p = mu-sel sigma-p = sigma-sel 

Predicted data-good is ON if any of the following occurs: 

- Two or three available and two locked 

- Two or three available, one locked, two-lock flag is off 

- Only one available and locked 

Predicted dilemma is ON if all of the following occur: 

- Two or three available 

- Two locked 

- Relative bias exceeds RM threshold 


3. 8. 6. 5 Configuration Acceptability 

a. General Information 


Determine which configurations are unacceptable. Of those, choose the 
"best" (i.e., based on state error performance where best means the 
smallest state error). 


Range affects downtrack primarily; bearing affects crosstrack 
primarily. 

Range error should be minimized (with some consideration for redundancy 
coverage) because range has a much larger effect on the STATE than does 
bearing. 


b. Inputs 


(/proposed config 


urat ions . 


c. Rules/heuristics/concepts 


(1) Do Not Want Dilemma 
IF 

- A proposed configuration will result in a dilemma in either 
measurement 

THEN 

- Veto that configuration. 
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(2) Need Range Data 
IF 

- A proposed configuration does not have range data 
THEN 

- Veto that configuration. 

(3) Do Not Have Bearing 
IF 

- A proposed configuration does not have bearing data 
THEN 

- Assume that the crosstrack state error under the proposed con- 
figuration will be the same as the current crosstrack state 
error. 

(4) Predict State Effect 
IF 

- A configuration has not been vetoed 
THEN 

- Predict the effect of the proposed configuration on the state 
error . 

(5) Pick Smallest State Effect 
IF 

- One configuration has a smaller predicted state error than 
another 

THEN 

- Veto the configuration with the larger state error. 

(6) Select a Configuration 
IF 

- All configurations that are going to be vetoed have been vetoed 
THEN 

- Select the only one left as the chosen configuration. 

(7) Confirm a Deselect 
IF 

- An LRU is deselected in the chosen configuration 
THEN 

- Confirm the deselect suggestion. 

(8) Deny a Deselect 
IF 

J - The initial deselect determination suggested deselecting an LRU 
LRU is not deselected in the chosen configuration 

' THEN 

- Deny the deselect suggestion. 

(9) Deselect Confirmed 
IF 


- A deselect suggestion has been confirmed 


THEN 
- -Se«4- 


recommenda^-i-ea^ to the operator^ 


iU eJ 




acTiC.N 
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(10) Deselect Shortcut 
IF 

- An LRU has been suggested for deselection 

- That suggestion has been confirmed or denied 
THEN 


- Withdraw the suggestion. 

d. Outputs 

^Configuration acceptability assessment results. 

e. Support Computations 
For crosstrack error 


already 


For each configuration without bearing, set 
mu-(p-b) = W state error / Cbb 

where mu-(p-b) is predicted mean of the bearing from W crosstrack 
ground-onboard comps. 


For each configuration, compute "estimated state effect" as follows: 


E = (SQRT (PLUS 
range effect / — 
bearing effect/ 


(SQ (TIMES 
(SQ (TIMES 
(SQ (TIMES 
(SQ (TIMES 


Crb Mu-r)) 

Crn Sigma-r)) 
Cbb Mu-b)) 

Cbn Sigma-b)))) 


where, Crb = 1 ft 
Crn = 1 ft 
Cbb = 200 ft/deg 
Cbn = 200 ft/deg 


These constants represent the predicted STATE ERROR for each type of 
TACAN error. 


Crn and Cbn could be reduced to account for the effect of filtering on 
measurement noise. 

For each deselected LRU in a configuration, add TBD feet to E for that 
configuration. This represents a factor for LRU redundancy considera- 
tions and is based on the number of LRU's deselected in each configura- 
tion. 


3.8.7 TACAN Reselect Recommendations 
a. General Information 
None . 
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b. Inputs 

(1) TACAN availability 

(2) TACAN locked status 

(3) TACAN quality ratings 

(4) TACAN fail flags 

(5) TACAN deselect flags 


c. Rules/heuristics/concepts 


/ |\Reselect a TACAN f| . 

'--'if fU 

- A TACAN LRU is unavailable 
failure or deselect 

- The LRU is locked and good 

- The LRU is locked and good 


in a measurement due to RM declared 

in range 
in bearing 


THEN 


- Recommend reselecting the LRU. 


d. Outputs 



Reselection recommendation. 


e. Support Computations 


None. 


3.8.8 TACAN AIF Change Recommendations 
a. General Information 

TACAN data should be taken if it will improve the NAV state. 
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TABLE 3.8-1.- CALL TO TAKE TACAN 


GND- 

RO/B 

GND- 

RO/B 

Two-range 

Lock 

No. of 
LRU Lock 

Edit 

Ratio 

Call • 

<0.5 
n. mi. 

<6 

deg 

ON 

1 

<1.0 

Deselect unlocked 
LRU's (range); take 
TACAN 

II 

II 

ON 

1 

> 1 .0 

Deselect unlocked 
LRU's (range); force 
TACAN 

II 

II 

ON 

>1 

< 1 .0 

Take TACAN 

II 

II 

ON 

> 1 

>1.C 

Force TACAN 

It 

If 

OFF 

N/A 

< 1 .0 

Take TACAN 

11 

II 

OFF 

N/A 

>1.0 

Force TACAN 

11 

> =6 
deg 

N/A 

N/A 

N/A 

NO GO for TACAN 

II 

N/A 

N/A 

N/A 

N/A 

NO GO for TACAN 


NOTE: Whenever the highest of GND-O/B R and GND-O/B B is equal to or less 

than 0.5 n. mi. and 6 deg, it is an indication that TACAN range and 
bearing are good and within TACAN RM's miscompare limits. 


If the TACAN two-range locked flag is on, it can be overridden by 
deselecting the unlocked LRU's. When the unlocked LRU's lock on, 
they have to be reselected before TACAN RM can process the data. 

If the onboard navigation state is bad {edit ratio greater than or 
equal to one), the TACAN measurement data have to be forced. After 
several TACAN measurement cycles, the TACAN AIF flag can be set to 
AUTO. Analysis shows that, for the edit ratio to be > 1.0, the 
TACAN measurement residual must be > 15K ft. 
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TABLE 3.8-11.- TACAN PROCEDURES SECTION - 
THREE LRU LEVEL 

Number of 

LRU's having Calls 

noise/bias 

Three LRU's > All three LRU's show — range/or bearing bias/or noise; 

toggle limit toggle limit we recommend toggle TACAN. After toggle 

TACAN, repeat. Verify TACAN data. 

Three LRU's < RM All three LRU's show--range/or bearing bias/or noise; 

limit RM limit we can take TACAN. 

Three LRU's s RM All three LRU's show range/or bearing, bias/or noise RM 

LIMIT limit greater than RM limit; NO GO for TACAN 

Two LRU's ^ RM LRU and show — range/or bearing bias/or noise, deselect 

limit RM limit LRU— AND--; Take TACAN. 

Two LRU's < RM LRU and show—range/or bearing bias/or noise, less than 

limit RM limit. Take TACAN. 

One LRU > RM limit LRU shows--range/or bearing bias/or noise; TACAN RM 

will fail range/or bearing LRU — . We can take TACAN. 

One LRU < LRU shows--range/or bearing bias/or noise less than RM 

limit. Take TACAN. 

Toggle limits 0.3 n. mi. range 

2 deg bearing 

RM limit 0.5 n. mi. range 

6 deg bearing 

NOTE: At initial acquisition, if all three LRU’s show range/or bearing 

bias/or noise greater than toggle limit, toggle TACAN from primary 
to alternate TACAN station is recommended. If the noise/or bias at 
the alternate TACAN station is larger than the primary TACAN sta- 
tion, toggle TACAN back to the primary TACAN station is recommended. 

If all three TACAN range/or bearing noise/or bias less than RM 
limit, take TACAN. 

If all three TACAN range/or bearing noise/or bias greater than RM 
limit, NO GO for TACAN. 

In the two LRU cases, deselect any LRU which has bias/or noise 
greater than RM limit because TACAN RM will fail the good LRU. In 
the one LRU case, if bias/or noise greater than RM limit, TACAN RM 
will fail that particular LRU (range/or bearing only). Otherwise, 
TACAN RM will mid-value-select measurement data. 

Note that, when an LRU is deselected, both range and bearing mea- 
surement data are eliminated from the TACAN RM. 
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TABLE 3.8-111.- TWO LRU LEVEL 


Number of 


LRU's having 
bias/noise 

Calls 

Two LRU’s > 

Both LRU's show--range/bearing bias/noise greater 
toggle than toggle limit; we recommend toggle TACAN. 
Limit after toggle TACAN, repeat verify TACAN data. 

Two LRU's ;> 

Both LRU and show — range/bearing bias/or noise RM 
limit greater than RM limit; NO GO for TACAN. 

Two LRU's < 

Both LRU and show range/bearing bias/or noise less 
than RM limit; take TACAN. 

One LRU Sr 

LRU shows — range/bearing bias/or noise; TACAN--will 
RM limit go into self test. After self test is com- 
pleted, take TACAN. 

One LRU < 

LRU shows--range/or bearing bias/or noise; TACAN RM 
will average the measurement. We can take TACAN. 

Toggle limits 

0.3 n. mi. range 
2 deg bearing 

RM limit 

0.5 n. mi. range 
6 deg bearing 


NOTE: At initial acquisition, if both LRU's show range/or bearing bias/or 

noise greater than toggle limit, toggle TACAN from primary TACAN 
station to alternate TACAN station is recommended. If the noise/or 
bias at the alternate TACAN station is larger than the noise/or bias 
at the primary TACAN station, toggle TACAN back to the primary TACAN 
station is recommended. 

If both LRU's have range/or bearing bias/or noise greater than RM 
limit, NO GO for TACAN. 

If both LRU's have range/or bearing bias/or noise less than RM 
limit, take TACAN. 

If one LRU has range/or bearing bias/or noise greater than RM limit 
(the other LRU has zero bias/or noise), TACAN RM will do a self-test 
on both LRU's. After self test, take TACAN. 

If one LRU has range/or bearing bias/or noise less than RM limit, 
TACAN RM will average the measurement data, take TACAN. 

NOTE: Self-test is done in the two LRU level only. 
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Blas/nolse 
>toggle limit 

< RM limit 
> RM Limit 
Toggle limits 
RM limit 


TABLE 3.8-IV.- ONE LRU LEVEL 

Calls 

LRU shows— range/or bearing bias/or noise, we recom- 
mend toggle TACAN. After toggle TACAN, repeat verify 
TACAN data. 

LRU — shows range/or bearing bias/or noise less than RM 
limit; take TACAN. 

LRU — shows range/or bearing bias/or noise greater than 
RM limit; NO GO for TACAN. 

0.3 n. mi. range 
2 deg bearing 

0.5 n. mi. range 
6 deg bearing 


NOTE: If bias/or noise is greater than toggle limit, toggle TACAN from 

primary to alternate TACAN station is recommended. After toggle 
TACAN, repeat verify TACAN data. 

If alternate TACAN station has larger bias/or noise, toggle TACAN 
from alternate TACAN station to primary station is recommended. 

If bias/or noise is less than TACAN RM limit, take TACAN; otherwise, 
NO GO for TACAN. 

(Skip if TACAN toggled already.) 

If all three range LRU plots > 0.3 n. mi. and all three bearing LRU plots 
> 2 deg [see note 1 ] . 

THEN:CALL: "Toggle TACAN, there is a bias in range and bearing." 

After TACAN toggle, repeat verify TACAN data procedures. 

If all three range LRU plots > 0.05 n. mi., 

THEN:CALL: "There is a range bias in all three LRU's in excess of the RM 

limit. We are NO GO for TACAN." 

If all three bearing LRU plots > 6 deg, 

THEN:CALL: "There is a bearing bias in all three LRU's in excess of the RM 

limit. We are NO GO for TACAN." [See note 2.] 

NOTE 1: If range/or bearings have bias/no noise greater than toggle limit, 
toggle TACAN is recommended. 

If the alternate TACAN station has larger bias/or noise than the 
primary TACAN station, toggle TACAN back to the primary TACAN sta- 
tion is recommended. 
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NOTE 2: If all three range/or bearing measurements have bias/or noise 
greater than RM limit, NO GO for TACAN. 


Inputs 


(1) Data good flags 

(2) Selected range error 

(3) Selected bearing error 

(4) Edit ratios 

(5) TACAN AIF flag 

(6) NAV error status 

(7) Engaged system 

Rules/heur istics/concepts 
(/) Go to AUTO 4 Part 1 ) <2 -j 

- - For e nga g ed systpm st a t e - errors — 

- Data good is on in rang ^ and bearing 



— a )' RSOif'+Ttfi 

~A)c TAocr* faw P><>. 

f* # A, 

— N a dPe/lfa - Srry'/f? ,tn 


- Selected range error is^ loss th a n V stat e e rro r-^^ 

- Selected bearing error is A ^ ess Jt han W- stat e a r -rer-~~ 

- Range and bearing edit ratios~are less tharTon 

- TACAN ted p revi o usly ->^ — . 

THEN* ^ 



c?o c< 


T 








- Recommend^ go to AUTO mode. 

(2^ Go to AUTO WfH 

a IF /"VSS Ps ch\ju£ tj-ecf) 

- TACAN is i<§ force mode 


>tY$ 


- Both edit radios are less than one 

THE N orp *vAcr7^ y-fioa* 

- Recommend go to AUTO mode. 

A 

Go to AUTO -(-Part 3) O- A ^ 


(/) CO to AUTO - WW 3 > w . „ ■ - - - ■ r Ato ^ s woo — 

^ bearing djta good flag is <sf V J/_ /s /„ 

-■'Range, data i5 good ■ 1— 

^fcTr?g^ error is b o g o thmr V (downtrgrek po &Ltive errtrr^^ 


- Range edit ratio less than one 

THEN* ^ 

- Recomm^ncl ^o ')UJTO mode. 


' h>h t 


(j/) Go to AUTO After Delta State {Position and Velocity) Is Done 
IF ^ 


6 


For^ engaged system &i ate errors - 




-Data good is ON in range and beari ng 
-^peJLta state is In work 

^6rror is^te^-s—U^arrltt^^ 


- error i5^£fts^ Tth a n 

- TACAN is inhibited 




Ac* fiEO^< => i'T£ C 


- /Vr 

— ■ /\j 0 7^4 £>/ *1 <" 'As /w* *■ Ac 






At A 
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Recommend go to AUTO after delta state (position and velocity) is 

c O'yte'f'Z 


(#) Go to Inhibit 
y IF i'S 


ir - fbA - r A = S £ r > t -> ^ r ' c o J ^ I 

- a F -or eng a ge d - sy s tom s tate e rror s -y^ Jp/'/a S7w^ /5 //^ tv&XIC 

- State error is good or suspect " " u 

- Range edit ratio is greater than one VP^VC^ t's £ f 

OR bearing edit ratio is greater than one while^not in cone^fT rokMoS'O 

- TACAN is not inhibited 


mi 


T*CA*> 

- Recommend^ go to INHIBIT. 

f) Go to Force f) 

► IF ^ fyf^S r*!> ^>^9^ 

> “ Data good is ON in range and bearing 

— For enga -ged -s y s t em -state-errsrs 


delta stateis in work 


_ /Ur T^^/e ho<, £<?***' 

- A)o y?7CV7»\ <s/p£P''PO 7^5 h^‘€ 

H££>ops7vA 


— i>i y uci ta o ta^c i. o xu n. if! 

-^ft|ng(5 error iS Aleas - fchan ~ a- ^cV'MV* 7 *' 

-^earf/i’g error is ^fresa- than R M li nir t g - ac<'&p'h&/<Z 

- gj.th er 4 .edit ratio is greater than one (inclusive OR) 

ThSn — — Z= 


R^cc^^uf ^g^To FORCE. 


d. Outputs 
-ja ra*. MP 
Recommendations. 

e^) Support Computations 


* ■ OfL B t'crfafisgr- 

- i\ no T 8p//Oc~ 


fbafa'CS *<>/ -Q)C/S7~ BPS -p * A 0 a ^ a ^ S . 
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vii/sn ‘Vi^MtfTS 3 yJUAht^ 
r.OIDKrV 10 ?'Mi I'lOSHFfTS bSOUAFUS 

.1 0737 'f K) SHI F_ T S b SUUARFS 



/^) cAeck f/«o^ Sc> ^ ^ c ' on 



^ . /) 


XF 

— 'fki 

- /H /fwrf cv>e /* ^ **>*££- * 

/IM V^> fLorj^z t>p#A/riG- bettfC- pRO$&SS*dl 

5 /©'A* 5 C>d~ Y^l eRfi&R ,s dr 

t/tXX /^ 7^ pfleu/octs CYe^ 

_ /Ib/e y^. Ct^A'Ptdf Syr*!* $- 0 "P ' 57 ‘ J? ^ > JUiAc^ 


(\o) cUec£ £-*** /bPf*\ 


- Fo& *3y&7£T*\ 

— Tis'oq’^i / 5 bft/Oo- process e<y^~ . 

~Jfi^ , v 5 too£S(L WO kO bP/Gd'Q Y&Cgis\ 

vog s> pRo^eSSPcO^ 

. •/ ) 4 /) 

^ P^eoni^'f^O ^ O^^fofK 'fk*^ Tef/YUftd W 
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3.9 BARO ALTITUDE 


3*9.1 Baro Measurement Quality 

a. General Information 

This group of rules determines whether or not baro altitude measure- 
ments are good. If they are bad, the rules attempt to determine the 
reason . 


The Mach Jump region is generally Mach 1.6 to 1.1. Roll reversals are 
characterized by a roll rate greater than some threshold. 

b. Inputs 


(1) GND-O/B baro altitude 

(2) HSTD status 

(3) Role rate 

(4) Mach Jump indicator 

(5) Engaged system 


c. Rules/heuristics/concepts 


( 1 ) Okay to Perform Baro Checks 
IF 

- Mach is greater than 5 or in Mach jump region 
THEN 


>7zyy\ 


- Do not perform any baro checking. 

(2) Baro Is Good ^Vass(^ 

- For engag e d oyote nr^V'f 

- |delta sel| s |delta Z| + 500 

- Baro wa s^not known to be good previously 

- The HSTD is good'. ' — — — L 7 * 

THEN. ~J~1 

^-'' ( Sa>o is good . 

(3) Baro Is Bad /PassA 1 


IF 


1 H. 






' ? 7 




- For ^ ga ge d syst em 

- HSTD is good 

- |delta sel| > (delta Z| + 500 

- Baro was 4 good or unkno wn t previously \ 

-= — B aro - GNBi s toleranoe" 


to: u -1 1 

-Baro 1s bad. 



(4) Roll Reversal 
IF 

- Baro is bad 
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- The vehicle is executing a roll-reversal 
T^H^N j.gjftt'la c ’Hv >4 


is bad because of roll-reversal. 


(5) Crew Call 
IF 

- HSTD is not good 
THEN 

is crew call. 



(1) Baro altitude quality 

(2) Maoh jum p i cgicm me^ 


ob 


Pc/- P ^ n C\ 


/grew call message 


Support Computations 

delta sel = GH - sel measurement; c^n° ^ ,o oc<: - ?- , s •» 

r }pC\ P i VCtCa^C' l 4 sr'^ 2>i J /i F«?s S, cf-Pt r* - c- ' 

j - £ sJ't'iA ; La.,. - --~t— ne-c Il'lc-'g. be ron< r i ' 4 J • ■ " 

_ _ __ . y r ~ ^ ^ * _ / 

Fl a g, 


^Jpppt^thJC i^no/sj *sY*^Th>s\ ' - -> _ * 

daia Grt'Ojfaljfp *£&£ l> 3£ . Fax y/* B^S <r-Ap //<* - ^ >W£7 he ro^r^f^cx 
rq#%?o tfC Fiag Status' fiFS * r ~ y<> 


a. General Information 

This group watches for changes in the baro altitude filter flag. It 
also watches to see if the change is caused by entering or leaving the 
Mach Jump region. 

b. Inputs 


(1) Baro filter flag 

(2) Mach Jump indicator 


c. Rules/heuristics/concepts 

( 1 ) Enter Mach Jump 
IF 

- The vehicle was nothin the Mach jump regi on , previously , 

- The vehicle is now in th^Mach jump region"^' 

THEN 

- Notify the operator that the Mach jump region has been entered. 

(2) Leave Mach Jump 
IF 

- The vehicle was^in the Mac h jump region, previously j 

- The vehicle is now out of the Mach jump region 
THEN 

- Notify the operator that the Mach Jump region has been exited. 

(3) Baro filter flag changed 
IF 

- For^ engaged system 


3.9-2 



if i VI If >«; 


_ ► i- 



X F 

— /^S 7“ / V, s Cj £>0 c(c 

THS+J 

- A>cr/, fy Or> 4 \o F\ 


/)j£ O-t'/z* 


'3 *0C> / <s? 0 <?puj 


CJ/ 


] \ 

| (_"7j ^)C(Rc Ps j/\ ^ KP£> 


XF 

- f~ 0 £ 'H'Ji- BP 5 5TS 73=^1 

- ~fpL ff*L 7 ~£) 

- pK&\)PoOs/y- /Mo/ knoiOA} /* &<? K <KC>eJl 

- jot-el'fa'- self ^ - j o/e/'fa-'zj ~f- 5~oc> 

- <^oac(\)Aq_ 'fktbf- B>o(lo P's <^<d<sc£L 

( 3 s ) t\ b#Jt m -ft*. BFS 

XF 

- POK pF &P 3 5^s7^:">V| 

- T /<2 P^r-D /s < ao < 9 ^ 

- hZAAC. fAt-V/CoXy CjCjCcQ Uink^nc^JA- 

-/ r >AW// > / J e /^ _ ^ I ^ 

THEV 

- N&4r{y cpo.\<<-rt.fL •fhd- ftsteo A 


] 

f 

I 

t 

I 

E 
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- The current value of the baro filter flag is different from its 
previous value 

THEN Os' 

- Conclude that the value has changed^qr^ 

- Notify the operator the new va 1 ue * 1 r "p^n c e ^pTTh i -^2 


d. Output^ 

A 

- Status me s sages . — ▼ 

e. Support Computations 
None . 





(i\ fare i j*k<t 

(g> ft\AC K j 


3.9.3 Baro Recommendations with Ground Available 

a. General Information 

This group recommends a setting for the AIF switch when the ground 
state is available. 


b. Inputs 

(1) Baro filter flag 

(2) Baro AIF flag 

(3) Baro altitude quality 

(4) HSTD status 

(5) Baro edit ratio <?U 3 //<s kb Uj/ 

(6) TACAN range filter flag 

(J7j -5 >-^72^™ 

c. Rules/heuristics/concepts 


(1) 


Baro to AUTO 


TF p&fZ_ -fUd fb^> 5 /5 7^V1 

- Baro is good 


- Baro edit ratio is less than one 

- Baro is inhibited 


THgNr 

-.Baro is GO for NAV. 
A 


if 


(2) Baro to Force 

L F i=cp 7^c ■5J'>?z~aa 

- Baro is good 

- Baro edit ratio is greater than oneA N ) 

- Baro is not being forced 
THEN 

- Recommend forcing baro. 


(3) End Baro Force 

If Far 57 5/2 r » v ’ 

- Baro is good 
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- Baro edit ratio is less than one 

- Baro is being forced 


THEN 


(l) 


- Recommend returning baro to AUTO. 


(4) Baro to Inhibit * 

IF ppg 

- Baro is b^d _ /s *&J 

- Baro is not inhibited 7 

THEN 

- Recommend that baro be inhibited. 


'fU. f}bck 




f 


d. Outputs 

Recommend AIF setting. 

Z' 

e. Support Computations 
None . 


^OQ/CW 
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3.10 THE MICROWAVE SCANNING BEAM LANDING SYSTEM 

The first thing to be done in the MSBLS section overall should be to check 
the landing site data table. If the MLS is not available at that site, no 
part of the entire MLS rule set should be invoked. Also no MLS is in the 
BFS. 


3.10.1 MSBLS Availability 

a. General Information 

Availability is determined by several values as follows: 

- Not commfaulted 

- Not failed 

- Powered on 


This group determines which LRU's are available. It also determines 
why the unavailable LRU's are unavailable. 

b. Inputs 

(1) Commfault flag 

(2) Power flag 

(3) Fail flag 

c. Rules/heuristics/concepts 

(1) MSBLS Commfault 
IF 

£ The LRU is powered on 

MLS LRU was not^com mfaulted .previously,, 

- The commfault flag for thalf LRU is now on 
THEN 

- Notify operator that the LRU is commfaulted (unless the whole 
string is down). 

- Conclude that the LRU is no longer available due to commfault. 

(2) MSBLS Commfault Clear 
IF 

- An MLS LRU wasi. c ommfaulted , previously j 

- The commfault flag for that LRU is now off 
THEN 

- Notify operator that the commfault for that LRU has cleared (un- 
less the whole string was down). 

- Conclude that the LRU has the status indicated by the fail flag. 


( 3 ) 


MSBLS Failed 
IF 


- An MLS LRU was Aavailable /previously/ 
-/ffVfail flag for that LRU is now on " J 
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THEN 

- Notify the operator of the LRU failure. 

- Conclude that the LRU is no longer available due to RM failure. 

(1J) MSBLS Power Off 
IF 

- An MLS LRU was^powere d on ipreviously/ 

- The power indicator for that LRU is now off 
THEN 

- Notify operator that the LRU has lost power. 

- Conclude that the LRU is not available due to loss of power. 


(5) MSBLS Power On 
IF 

- An MLS LRU was^ powe red offj previously , 

- The power indicator For that LRU is now on 
THEN 

- Notify operator that the LRU has been powered on. 

- Conclude that the LRU has the status indicated by the fail flag. 



(7) Three MSBLS 's Available 
IF 

- All three MLS LRU's are available 


-^The number of available MLS LRU's is three. 


( 8 ) 


Two MSBLS 's Available 
IF 


- MLS LRU A is available 

- MLS LRU B is available 

- MLS LRU C is not available 


THEN 


-/he number of available MLS LRU’s is. two. 


(9) One MSBLS Available 
IF 


- MLS LRU A is available 

- MLS LRU B is not available 

- MLS LRU C is not available 
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(10) No MSBLS Available 
IF 

- All MLS LRU's are not available 

TH LVc.vtu<b-M 

-^xhe number of available MLS LRU's is zero. 

d. Outputs 

(J) MSBLS LRU availability. 

e. Support Computations 
None . 


3.10.2 MSBLS Lockon Status 

a. General Information 

This group determines how many LRU’s are locked on to range, azimuth, 
and elevation. 


b. Inputs 

(1) Estimated altitude 

(2) MSBLS lockon flags 

(3) LRU availability 

(4) Runway state vector 


c. Rules/heuristics/concepts 


( 1 ) Check Channel 
IF 

- At least one MLS LRU is available 

- No LRU is locked on to one of the measurements (i.e., range, azi- 
muth, or elevation) 

- The vehicle is below an altitude of 13 000 ft 
THEN. ^7 £>fXL /vee/A? V-o 
-^-frs-k. that the 


MLS channel 


number be verified. 
/> 


(2) Three MSBLS 1 s Locked 
IF 

- All three LRU's are available 

- All LRU's are locked on to a measurement -- K .o . t rang e , a z imuth , 

or elevation ) 

-^The number locked for that measurement is three. 

- If the number locked previously was zero, notify operator that 
MLS is locking on. 
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(3) Two MSBLS's Locked 
IF 

- LRU A is locked on to a measurement 

- LRU B is locked on to the same measurement 

- LRU C is not locked on to the measurement or„not available -Linea l* 

-nurement i r ' c ‘ ( ' ar - - _i i i nnm^ » i««« i im i , ^mi i >, -■ *, 01 r — ^ 

— refers' Urany LRU number-) — 

THEN 

-^fTie number of LRU's locked on to that measurement is two. 

- If the number locked previously was zero, notify the operator 
that MLS is locking on. 


(4) One MSBLS Locked 
IF 

- LRU A is locked on to a measurement 

- LRU B is not locked on to the measurement 

- LRU C is not locked on to the measuremen 


ou r effi a n t r e f e rs to ra n ge, QBimoth t oj] 
- ref ers bo an y LRU num ber ) 


73? 




not availab l 
r not aval lab 


then 

-^■yhe number of LRU's locked on to that measurement is one. 

- If the number locked previously was zero, notify the operator 
that MLS is locking on. 

(HS <*><* s 

(5) No MSBLS Locked 

- At least one LRU is available 


X 



MS B LS wu u lucked un lu a meJsTii ament pi e vi o usly ^ 

No LRU is locked on to that measurement (measurement refere to 

aei m ub l r, or e levation) ~~ 


f~ &Hge j Gnmnwi i • 

TH EN 

-^THe number of LRU's locked for that measurement is zero. 
- Notify operator that the MLS lost lock. 


(6) Wide Landing 
IF 

- Y/X > tan 13.5 deg (as shown in figure following) 

THEN 

- Notify operator of possible "out of MLS cone" condition. 


d. Outputs 

(^Number of MSBLS's locked. 

(2^ Lc c k- mpss <*<<.& S 

e. Support Computations 


None. 
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a. General Information 


Check plots. For each available and lock measurement, calculate b (y- 
intercept) and sigma (noise). Wait for about three points, then com- 
pare b and sigma verses the RM limits. 

Range = 2000 ft 
Azimuth = 0.5 deg 
Elevation = 0.4 deg 

IF the b or sigma is > the RM limit 
THEN that measurement's status = Bad 


IF the b or sigma is > 1/2 the RM limit and < the RM limit 
THEN that measurement status = Suspect 

IF the LRU is not available or not locked on 
THEN that measurement status = None 


This group checks measurement errors and determines the quality of the 
three LRU's. 


Inputs 

(1) MSBLS LRU lock flags 

(2) MSBLS availability 

(3) Quality ratings 

Rules/heuristics/concepts 



(;) MSBLS Error Change 

x IF /— M 

- (Eithery the noise or bias on 
than it did previously 



a measurement has a different status 
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THEN 

- Notify the operator of the new status 
(/) MSBLS LRU Quality (Part 1) 

3 IF 

- An MLS LRU is unavailable or unlocked in a measurement 
THEN 

- That LRU has no quality rating for that measurement. 


t 


MSBLS LRU Quality (Part 2) 

IF 

- An MLS LRU is available 

- The LRU is locked on a measurement 

- The noise and bias ratings on the measurement indicate a quality 
rating different from the one. given to the LRU, previously _j 

THEN^^I^ / S * ' 


d. 


- No te 4j j ro %new quality rating for the LRU 
Outputs 


(J) MSBLS LRU quality, 
e. Support Computations 


None. 


3.10.4 MSBLS Flag Status 

a. General Information 

Note any changes in data good flags and inform ONAV operator; i.e., 
good-to-bad or bad-to-good. 

Print dilemma messages if dilemmas occur. Also note changes in proc- 
essing flags, not-processing or processing. After start of processing, 
check state error (PASS). If error increases, force TACAN. 

This group watches for changes in the MLS data good flags and filter 
flags . 

b. Inputs 

(1) MSBLS filter flags 

(2) MSBLS data good flags 

(3) MSBLS dilemma flags 

c. Rules/heuristics/concepts 

(1) MSBLS Filter Flag Changed 
IF 
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- The current value of a MLS filter flag is different from its 
previous value 

THEN 

- Conclude that the value has changed. 

- Notify operator if the new value is "process.” 

(2) MSBLS Data Good Flag Changed 
IF 

- The current value of an MLS data-good flag is different from its 
previous value 

THEN 

- Notify operator of the new value. 

(3) MSBLS Dilemma 
IF 

- MLS dilemma flag is on for any measurement 

- H ^^th^operator a h J>h***\ 

d. Outputs 


0)m. 


ISBLS status messages. 
Support Computations 
None. 


3.10.5 MSBLS Recommendations 
a. General Information 


For each measurement type, count the number of LRU's with noise or bias 
greater than the RM limits. 


This group determines what actions need to be taken on the MLS to keep 
it from corrupting the NAV state. 

No. available No. locked Count Action 


3 1 

2 


3 


2 1 

2 

1 1 

N/A N/A 


1 None 

1 Deselect bad LRU 

(power off or flip thumbwheel) 

2 Force TACAN 

1 RM will fail LRU 

2 Deselect bad LRU's 

3 Force TACAN 

1 None 

1 Deselect bad LRU's 

2 Force TACAN 

1 Force TACAN 

0 Skip MSBLS section 
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Note that, with the preceding table, there is the possibility of redun- 
dant commands or of getting rid of all of the MLS data without -forcing 
TACAN's. Other subsystem interactions and variations on response also 
are determined by flight rule: no navigation input will be used that 

will cause the NAV state to degrade. 

b. Inputs 

(1) MSBLS availability 

(2) Number of MSBLS's locked 

(3) MSBLS LRU quality 


c. Rules/heuristics/concepts 


(1) Three-level MSBLS Deselect 1 
IF 

- Three LRU's are available 

- Two LRU's are locked on 

- One LRU is bad / 

THEN fvTfa 

- Recommend deselecting the bad LR 





(2) Three-level MSBLS Force TACAN 1 
IF 

- Three LRU's are available 

- Two LRU's are locked on 

- Two LRU's are bad in the same measurement 

THEN -fr iW op*e**Tc£ 

- Recommend^ forcing TACAN. 


(3) Three-level MSBLS RM Fail 
IF 

- Three LRU's are available 

- Three LRU's are locked on 

- One LRU is bad / 

THEN 

- Recommend^ deselecting (for a noise problem) or waiting for RM 
isolation (for a bias problem). 

(4) Three-level MSBLS Deselect 2 fZiA > 

IF 

- Three LRU's are available 

- Three LRU's are locked on 

- Two LRU’s are bad in the same measurement 

THEN -fc 

- Recommend^deselecting the bad LRU's. 

(5) Three-level MSBLS Force TACAN /2 ~\ — 

IF ^ 

- Three LRU's are available 

- Three LRU's are locked on 

- Three LRU's are bad on the same measurement 
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( 6 ) 


THEN 

- Recommend^forcing TACAN^' 

Two-level MSBLS Deselect 
IF 

- Two LRU’s are available 

- Two LRU’s are locked on 

- One LRU is bad 

THEN -jcffa °f Qh ' 

- Recommend deselecting the bad 

/ 




LRU. 


(7) 


Two-level MSBLS Force TACAN 
IF 

- Two LRU’s 

- Two LRU’s 


available 
locked on 

LRU’s are bad in the 
- Recommend^ forcing TACAN. 


- Two 
THEN 


are 

are 

are 


same measurement 


( 8 ) 


One-level MSBLS Force TACAN 
IF 

- One 

- One 

- One 
THEN 


LRU 

LRU 

LRU 




(9) 



is available 
is locked on 
is bad 

i**e op 

- Recommend^ forcing TACAN. 

Do Not Force TACAN 
IF 

rcing TACAN is recommended^ 
TftCftN— ic not GCMIjbm TrttTAN 





.V 


0) 


THEN 

- Cancel„force TACAN recommendation, 

- Recommend^power ing 

Outputs 

Recommended actions. 


6 


off MLS. 

y-c iU- cfWaTok 


e. Support Computations 


None . 


3.10.6 MSBLS Effects on State Errors 
a. General Information 

This group checks to see if MSBLS processing makes the state error 
worse . 
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b. Inputs 

(1) GND-O/B state error 

(2) MSBLS filter flags 

c. Rules/heuristics/concepts 

( 1 ) Error Before MSBLS 
IF 

- At least one LRU is locked on range 

- No MLS is being processed 
THEN 

- Remember the current worst-axis state error. 

(2) Error After MSBLS 
IF 

- MLS is being processed 

- Thef&lte error is worse than before MLS was processed 

THEN * fr> ... MU 

- Recommend forcing TACAN.^* 4 - T - ® apoio tV rf ciM Ml-S 

/I A 

d. Outputs 
^^Recommended action. 

e. Support Computations 
None. 
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3.11 HIGH-SPEED TRAJECTORY DETERMINATOR 

a. General Information 

These rules have the task of determining the status of the HSTD state 
vector and depend primarily on operator input. The rules can detect 
when the filter is stopped and some situations where the filter is not 
converged. In addition, the operator can indicate when the filter is 
bad. The operator must specify when the filter is good; the rules 
never do that automatically. 

The overall rationale is that it is better to assume ground is bad and 
not make some recommendations rather than assume that ground is good 
and encounters bad recommendations. The issue is to keep consistency 
between ONAV expert system recommendations and ground status (which is 
available only over the "loop"). 

b. Inputs 

( 1 ) Operator input 

(2) Ground NAV expert system (not yet available) 

(3) Internal rules in the ONAV expert system 

c. Rules/heuristics/concepts 

(1) Start HSTD 
IF 

- The HSTD has not been running 

- The "stopped" indicator is off 
THEN 

- Conclude that the HSTD is running but has not converged. 

(2) HSTD Bad 

IF 

- The HSTD w a s good 

- The operator entered the HSTD bad indicator 
THEN 

- Conclude that the HSTD is bad (not converged). 

(3) HSTD Good 

IF ,S 

- The HSTD -was bad 

- The operator entered the HSTD good indicator 

- At least 10 sec have elapsed since last restart 
THEN 

- Conclude HSTD is good. 

(4) HSTD Stopped 
IF 

- The HSTD is running 

- The stopped indicator is on 
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THEN 

- Conclude that the HSTD has been stopped. 

(5) HSTD Editing 

IF „ 

- The HSTD -w«s good 

- Less than three stations are being processed 

- A given station is not being excluded 

- Data is coming from that station 

- At least one good measurement of a given type was available from 
that station 

- All of the measurements of that type from that station were 
edited by the filter 

THEN 

- Conclude that the HSTD is bad. 

(6) HSTD Prop 

- The HSTD good 

- The prop flag is on 
THEN 

- Conclude that the HSTD is bad. 


(7) HSTD Covariance 

IP 

- The HSTD -was- good 

- The root sum square (RSS) position or velocity covariance 
diagonals are too large 

THEN 

- Conclude that the HSTD is bad. 




(8) HSTD Restart 
IF T /, e a ^ t/) /* 

- The HSTD restart flag is on 
THEN 

- Conclude that the HSTD is bad. 

Record the current time as the time of the last restart. 


j (9) No Ground Data 
/ IF 

I - No ground data available 

j THEN 

t - Make a statement on NAV as it relates to BFS transfers. 



d. Outputs 

HSTD health (good, bad, not running, not available). 

e. Support Computations 
None . 
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